Xorg X11 Server
Approved changes feed: RSS · Atom
cpe:2.3:a:xorg:xorg-x11-server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Xorg (ea8f2dfd-a242-5fc1-9de0-7f736d722b12) |
|---|---|
| Product | Xorg X11 Server (df9dbfbd-8569-5a87-b199-e9ed475ccd31) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-2624 |
vulnerable | 2026-06-08 05:09:24.802119 |
Details available
MEDIUM (5.9)
It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could allow an efficient brute force attack.
Published: 2018-07-27T18:00:00.000Z
Updated: 2024-08-05T14:02:06.893Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.