Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-10972

Опубликовано: 06 июл. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4
CVSS3: 6.5

Описание

Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.

РелизСтатусПримечание
devel

not-affected

code not present
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [code not present]]
esm-infra/xenial

not-affected

code not present
precise/esm

DNE

trusty

not-affected

code not present
trusty/esm

DNE

trusty was not-affected [code not present]
upstream

needs-triage

vivid/ubuntu-core

DNE

xenial

not-affected

code not present
yakkety

not-affected

code not present

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

code not present
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/ubuntu-core

DNE

xenial

not-affected

code not present
yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

released

2:1.19.3-1ubuntu3
esm-infra-legacy/trusty

released

2:1.15.1-0ubuntu2.9
esm-infra/xenial

released

2:1.18.4-0ubuntu0.3
precise/esm

DNE

trusty

released

2:1.15.1-0ubuntu2.9
trusty/esm

released

2:1.15.1-0ubuntu2.9
upstream

needs-triage

vivid/ubuntu-core

DNE

xenial

released

2:1.18.4-0ubuntu0.3
yakkety

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/xenial

released

2:1.18.4-1ubuntu6.1~16.04.2
precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/ubuntu-core

DNE

xenial

released

2:1.18.4-1ubuntu6.1~16.04.2
yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [end of life]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [end of life]
upstream

needs-triage

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [end of life]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [end of life]
upstream

needs-triage

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [end of life]]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was ignored [end of life]
upstream

needs-triage

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [2:1.18.3-1ubuntu2.3~trusty2]]
precise/esm

DNE

trusty

released

2:1.18.3-1ubuntu2.3~trusty2
trusty/esm

DNE

trusty was released [2:1.18.3-1ubuntu2.3~trusty2]
upstream

needs-triage

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

zesty

DNE

Показывать по

EPSS

Процентиль: 68%
0.0056
Низкий

4 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.3
redhat
больше 8 лет назад

Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.

CVSS3: 6.5
nvd
больше 8 лет назад

Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.

CVSS3: 6.5
debian
больше 8 лет назад

Uninitialized data in endianness conversion in the XEvent handling of ...

CVSS3: 6.5
github
больше 3 лет назад

Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious users to access potentially privileged data from the X server.

suse-cvrf
больше 8 лет назад

Security update for xorg-x11-server

EPSS

Процентиль: 68%
0.0056
Низкий

4 Medium

CVSS2

6.5 Medium

CVSS3

Уязвимость CVE-2017-10972