Read the docs
TI-2017-01875 Aliases CVE-2017-2624GHSA-6pw7-qhf8-rjff

Information disclosure in xorg-x11-server

Priority LOW 32CWE-385Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Will not fix Red Hat: no fix planned

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-200.

Summary

It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could allow an efficient brute force attack.

Why it matters now

EPSS 0.00697 53rd percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Will not fix Red Hat: no fix planned

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Xorgxorg-x11-server1.19.0—No fix listedCNA
  • xorg-x11-server VendorXorg Affected 1.19.0 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*up to 1.19.4Vulnerablex.org
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*7.0VulnerableDebian
  • cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:* Versions up to 1.19.4 Vulnerable ·x.org
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Not affected: 1 product
  • Red Hat Enterprise Linux 9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-2624
  2. 2026-10-03 Alias added: GHSA-6pw7-qhf8-rjff

References

Exploit 2

Patch 1

Advisory 3

  • TI-2008-02265 Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X… CVSS 2.0MEDIUM 6.8
  • TI-2017-01876 It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate… CVSS 3.0MEDIUM 6.5
  • TI-2017-01877 It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. CVSS 3.0MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences