CVE-2017-13723

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2017/dsa-4000Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/10/04/10Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/101253Third Party Advisory, VDB Entry
https://cgit.freedesktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76acThird Party Advisory
https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
https://lists.x.org/archives/xorg-announce/2017-October/002808.htmlVendor Advisory
https://security.gentoo.org/glsa/201710-30Third Party Advisory
http://www.debian.org/security/2017/dsa-4000Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/10/04/10Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/101253Third Party Advisory, VDB Entry
https://cgit.freedesktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76acThird Party Advisory
https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
https://lists.x.org/archives/xorg-announce/2017-October/002808.htmlVendor Advisory
https://security.gentoo.org/glsa/201710-30Third Party Advisory

Timeline

Published: Oct 10, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-137245.4On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" pa CVE-2017-137259.8The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().CVE-2017-137266.5There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A CVE-2017-137276.5There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD CVE-2017-137287.5There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote CVE-2017-137296.5There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service CVE-2017-13738.8Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user t CVE-2017-137306.5There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial CVE-2017-137316.5There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial o CVE-2017-137326.5There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of se CVE-2017-137336.5There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of serv CVE-2017-137346.5There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service