CVE-2017-13721 Privilege escalation in n/a

Medium 4.7 Published 9 Oct 2017 Updated 5 Aug 2024

An authenticated attacker can cause X server aborts or replace shared memory segments of other clients, leading to privilege escalation or denial of service.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2017-13721?

CVE-2017-13721 is a medium-severity vulnerability in Debian Debian Linux, published on 9 Oct 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session.

Weakness: CWE-269

Which versions are affected by CVE-2017-13721?

It affects 2 products.

Products include Debian Debian Linux, X.org X Server.

How do I fix CVE-2017-13721?

Upgrade to a fixed version.

Is CVE-2017-13721 being exploited?

There is no known exploitation of CVE-2017-13721 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as ALPINE-CVE-2017-13721, DEBIAN-CVE-2017-13721, GHSA-p2j5-8c6q-m7cw, UBUNTU-CVE-2017-13721.