Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2017-10971

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

X.Org X Server是X.Org基金会的一款X Window系统显示服务器。 X.Org X服务器2017-06-19之前的版本中存在安全漏洞。攻击者可利用该漏洞造成X Session崩溃或在X Server上下文中执行代码。

AI Predicted 6.5 Difficulty: Moderate EPSS 3.88% · P90 Updated Feb 21, 2026

Possible ATT&CK Techniques 2 AI

T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2017-10971

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by exploiting a stack overflow in the endianness conversion of X Events.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

X.Org X服务器安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2017-10971

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2017-10971

请登录查看更多情报信息。

Patches & Fixes for CVE-2017-10971 (3)

https://cgit.freedesktop.org/xorg/xserver/commit/?id=8caed4df36b1f802b4992edcfd282cbeeec35d9d x_refsource_MISC
https://cgit.freedesktop.org/xorg/xserver/commit/?id=215f894965df5fb0bb45b107d84524e700d2073c x_refsource_MISC
https://cgit.freedesktop.org/xorg/xserver/commit/?id=ba336b24052122b136486961c82deac76bbde455 x_refsource_MISC

Vendor Advisories for CVE-2017-10971 (3)

https://bugzilla.suse.com/show_bug.cgi?id=1035283 x_refsource_MISC
http://www.securityfocus.com/bid/99546 vdb-entry x_refsource_BID
http://www.debian.org/security/2017/dsa-3905 vendor-advisory x_refsource_DEBIAN

https://www.cve.org/CVERecord?id=CVE-2017-10971

Same Patch Batch · n/a · 2017-07-06 · 21 CVEs total

CVE-2017-10970		Cacti 跨站脚本漏洞
CVE-2017-6714		Cisco Ultra Services Framework Staging Server AutoIT service 操作系统命令注入漏洞
CVE-2017-6713		Cisco Elastic Services Controller 安全漏洞
CVE-2017-6712		Cisco Elastic Services Controller 安全漏洞
CVE-2017-6711		Cisco Ultra Services Framework 授权问题漏洞
CVE-2017-6709		Cisco Ultra Services Framework AutoVNF工具信息泄露漏洞
CVE-2017-6708		Cisco Ultra Services Framework 信息泄露漏洞
CVE-2017-6707		多款Cisco产品StarOS 操作系统命令注入漏洞
CVE-2016-10396		IPsec-Tools 安全漏洞
CVE-2017-10972		X.Org X服务器安全漏洞
CVE-2017-0709		Android HTC Sensor hub驱动程序信息泄露漏洞
CVE-2017-10975		Lutim 跨站脚本漏洞
CVE-2017-10976		SWFTools 安全漏洞
CVE-2017-9524		QEMU qemu-nbd server 输入验证错误漏洞
CVE-2017-8932		Google Go 信息泄露漏洞
CVE-2017-8290		TeamSpeak Server 缓冲区错误漏洞
CVE-2017-10973		FineCMS 安全漏洞
CVE-2017-10967		FineCMS 跨站脚本漏洞
CVE-2016-4000		Jython 代码问题漏洞
CVE-2017-6248		Android NVIDIA sound驱动程序权限许可和访问控制问题漏洞

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a