Vulnerability CVE-2017-13721: Information
Description
In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session.
Severity: MEDIUM (4.7) Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| xorg-server | sisyphus | 1.19.4-alt1 | 21.1.13-alt1 | ALT-PU-2017-2383-1 | 190364 | Fixed |
| xorg-server | p10 | 1.19.4-alt1 | 1.20.14-alt13 | ALT-PU-2017-2383-1 | 190364 | Fixed |
| xorg-server | p9 | 1.19.4-alt1 | 1.20.8-alt12 | ALT-PU-2017-2383-1 | 190364 | Fixed |
| xorg-server | p8 | 1.18.4-alt1.M80P.5 | 1.19.7-alt0.M80P.1 | ALT-PU-2017-2384-1 | 190283 | Fixed |
| xorg-server | c10f1 | 1.19.4-alt1 | 1.20.14-alt12 | ALT-PU-2017-2383-1 | 190364 | Fixed |
| xorg-server | c9f2 | 1.19.4-alt1 | 1.20.8-alt12 | ALT-PU-2017-2383-1 | 190364 | Fixed |
| xorg-server | c7 | 1.14.5-alt3.M70C.1 | 1.14.5-alt3.M70C.4 | ALT-PU-2017-2407-1 | 190547 | Fixed |
| xorg-server | p11 | 1.19.4-alt1 | 21.1.13-alt1 | ALT-PU-2017-2383-1 | 190364 | Fixed |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
|---|---|
| [xorg-announce] 20171004 [ANNOUNCE] xorg-server 1.19.4 |
|
| https://cgit.freedesktop.org/xorg/xserver/commit/?id=b95f25af141d33a65f6f821ea9c003f66a01e1f1 |
|
| [oss-security] 20171004 Fwd: X server fixes for CVE-2017-13721 & CVE-2017-13723 |
|
| 101238 |
|
| GLSA-201710-30 |
|
| DSA-4000 |
|