Buffer Overflow Vulnerability in X.Org Server by The X.Org Foundation

CVE-2017-13723

What is CVE-2017-13723?

A buffer overflow vulnerability exists in X.Org Server prior to version 1.19.4. This flaw allows a local, authenticated attacker to exploit the system by injecting large or improperly formatted XKB related atoms. The attack can result in the overflow of a global buffer, potentially causing the X server to crash or leading to unpredictable behavior. The vulnerability can be exploited through the xkbcomp utility, which processes XKB definitions, thereby affecting system stability and security.

References