CVE-2017-10971

In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.

• CWE-119

• http://www.debian.org/security/2017/dsa-3905
• http://www.securityfocus.com/bid/99546Third Party Advisory, VDB Entry
• https://bugzilla.suse.com/show_bug.cgi?id=1035283Issue Tracking, Third Party Advisory
• https://cgit.freedesktop.org/xorg/xserver/commit/?id=215f894965df5fb0bb45b107d84524e700d2073cMailing List, Third Party Advisory
• https://cgit.freedesktop.org/xorg/xserver/commit/?id=8caed4df36b1f802b4992edcfd282cbeeec35d9dMailing List, Third Party Advisory
• https://cgit.freedesktop.org/xorg/xserver/commit/?id=ba336b24052122b136486961c82deac76bbde455Mailing List, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3905
• http://www.securityfocus.com/bid/99546Third Party Advisory, VDB Entry
• https://bugzilla.suse.com/show_bug.cgi?id=1035283Issue Tracking, Third Party Advisory
• https://cgit.freedesktop.org/xorg/xserver/commit/?id=215f894965df5fb0bb45b107d84524e700d2073cMailing List, Third Party Advisory
• https://cgit.freedesktop.org/xorg/xserver/commit/?id=8caed4df36b1f802b4992edcfd282cbeeec35d9dMailing List, Third Party Advisory
• https://cgit.freedesktop.org/xorg/xserver/commit/?id=ba336b24052122b136486961c82deac76bbde455Mailing List, Third Party Advisory

Published

Jul 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10965An issue was discovered in Irssi before 1.0.4. When receivin…
• CVE-2017-10966An issue was discovered in Irssi before 1.0.4. While updatin…
• CVE-2017-10967In FineCMS before 2017-07-06, application\core\controller\co…
• CVE-2017-10968In FineCMS through 2017-07-07, application\core\controller\t…
• CVE-2017-1097IBM Emptoris Strategic Supply Management Platform 10.0.0.x t…
• CVE-2017-10970Cross-site scripting (XSS) vulnerability in link.php in Cact…
• CVE-2017-10972Uninitialized data in endianness conversion in the XEvent ha…
• CVE-2017-10973In FineCMS before 2017-07-06, application/lib/ajax/get_image…
• CVE-2017-10974Yaws 1.91 allows Unauthenticated Remote File Disclosure via …
• CVE-2017-10975Cross-site scripting (XSS) vulnerability in Lutim before 0.8…
• CVE-2017-10976When SWFTools 0.9.2 processes a crafted file in ttftool, it …
• CVE-2017-10978An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x b…