CVE-2017-2624CWE-385

It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies

Medium · published July 27, 2018

CVSS v3.0
5.9
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could allow an efficient brute force attack.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00697 · 52.2th percentile
Weakness
CWE-385 · Covert Timing Channel
Published
2018-07-27T18:00Z
EPSS history
Timeline
  • 27 JUL 18:00Z
    It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies
    cvelistv5