A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-eglUpgrade libglvnd-glxUpgrade xorg-x11-server-develUpgrade libglvnd-develUpgrade libglvnd-glesUpgrade mesa-libgbm-develUpgrade libglvnd-core-develUpgrade libwacom-develUpgrade libinput-develUpgrade libglvndUpgrade libglvnd-openglUpgrade mesa-libOSMesa-develUpgrade xorg-x11-driversUpgrade xorg-x11-server-source | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade egl-waylandUpgrade libX11-develUpgrade libdrm-debugsourceUpgrade egl-wayland-debugsourceUpgrade libX11-xcbUpgrade libglvnd-debugsourceUpgrade mesa-libGL-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libinput-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libGL-develUpgrade libX11-commonUpgrade mesa-libglapiUpgrade mesa-libOSMesa-debuginfoUpgrade libglvndUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-glesUpgrade libinput-utilsUpgrade mesa-dri-driversUpgrade libinputUpgrade libglvnd-core-develUpgrade libwacom-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libX11-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libGLUpgrade xorg-x11-driversUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libEGL-develUpgrade xorg-x11-server-develUpgrade libglvnd-openglUpgrade egl-wayland-debuginfoUpgrade libglvnd-eglUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-vulkan-driversUpgrade libwacom-debugsourceUpgrade libglvnd-glxUpgrade mesa-vdpau-driversUpgrade libglvnd-egl-debuginfoUpgrade libX11-debuginfoUpgrade mesa-debuginfoUpgrade mesa-vulkan-develUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade mesa-libEGL-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libdrmUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XephyrUpgrade mesa-libOSMesaUpgrade xorg-x11-server-sourceUpgrade mesa-libgbm-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libwacom-dataUpgrade libX11Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libgbmUpgrade mesa-filesystemUpgrade libinput-test-debuginfoUpgrade libinput-debugsourceUpgrade libglvnd-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libEGLUpgrade libwacomUpgrade libdrm-develUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-develUpgrade libdrm-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-dmxUpgrade xwaylandUpgrade xorg-nestserverUpgrade xorg-vfbserverUpgrade xephyrUpgrade xorg-server | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Dec 16, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libglvnd-glxUpgrade libX11-develUpgrade mesa-libEGL-develUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade mesa-libxatrackerUpgrade libinput-develUpgrade mesa-libGLUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade mesa-filesystemUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade libX11Upgrade mesa-libglapiUpgrade libwacomUpgrade libX11-xcbUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade libglvndUpgrade libinputUpgrade libwacom-dataUpgrade xorg-x11-driversUpgrade egl-waylandUpgrade mesa-vulkan-driversUpgrade mesa-dri-driversUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-develUpgrade mesa-libOSMesaUpgrade libinput-utilsUpgrade libglvnd-develUpgrade libwacom-develUpgrade libglvnd-openglUpgrade libdrm-develUpgrade libdrmUpgrade mesa-libGL-develUpgrade mesa-libEGLUpgrade mesa-libgbmUpgrade mesa-libgbm-develUpgrade libX11-common | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-vulkan-driversUpgrade xorg-x11-driversUpgrade mesa-libgbm-develUpgrade libinput-debugsourceUpgrade libinput-debuginfoUpgrade libglvnd-openglUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-debugsourceUpgrade libinput-utilsUpgrade mesa-libGL-develUpgrade xorg-x11-server-debuginfoUpgrade egl-wayland-debugsourceUpgrade libglvnd-opengl-debuginfoUpgrade libdrmUpgrade mesa-libGL-debuginfoUpgrade mesa-dri-driversUpgrade libX11-commonUpgrade libglvnd-eglUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libGLUpgrade drm-utils-debuginfoUpgrade mesa-libgbmUpgrade mesa-dri-drivers-debuginfoNo solution existsUpgrade libdrm-debuginfoUpgrade libglvnd-glesUpgrade libdrm-develUpgrade libglvndUpgrade libglvnd-core-develUpgrade libwacom-debugsourceUpgrade mesa-debuginfoUpgrade mesa-libOSMesaUpgrade libX11-xcb-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-sourceUpgrade egl-wayland-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-vulkan-develUpgrade libinput-test-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-XdmxUpgrade libwacom-debuginfoUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-debugsourceUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-XnestUpgrade libwacom-dataUpgrade libX11Upgrade egl-waylandUpgrade libglvnd-glx-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-vdpau-driversUpgrade libX11-develUpgrade mesa-libEGLUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade libglvnd-glxUpgrade libX11-xcbUpgrade libX11-debuginfoUpgrade libwacomUpgrade libinput-develUpgrade libwacom-develUpgrade xorg-x11-server-XvfbUpgrade libinputUpgrade libX11-debugsourceUpgrade mesa-libxatrackerUpgrade mesa-filesystemUpgrade libglvnd-egl-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-commonUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libxatracker-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libglvnd-glxUpgrade libX11-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-driversUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-develUpgrade mesa-libOSMesaUpgrade libinput-utilsUpgrade libX11Upgrade xorg-x11-server-XorgUpgrade libglvndUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade egl-wayland-debugsourceUpgrade egl-wayland-debuginfoUpgrade egl-waylandUpgrade libglvnd-develUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-libgbm-develUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-develUpgrade libwacomUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-openglUpgrade libwacom-develUpgrade mesa-dri-driversUpgrade mesa-filesystemUpgrade libinput-debugsourceUpgrade libdrm-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libdrmUpgrade libdrm-develUpgrade libX11-xcb-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-glesUpgrade libglvnd-egl-debuginfoUpgrade libinputUpgrade mesa-debugsourceUpgrade mesa-libgbmUpgrade libinput-develUpgrade mesa-libGLUpgrade libinput-utils-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XvfbUpgrade mesa-libEGL-debuginfoUpgrade mesa-debuginfoUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XephyrUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libxatrackerUpgrade libwacom-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade libwacom-debugsourceUpgrade mesa-libEGLUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libOSMesa-develUpgrade libglvnd-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libglapiUpgrade libglvnd-eglUpgrade libglvnd-debuginfoUpgrade libX11-xcbUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-vdpau-drivers-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-XvncUpgrade xorg-x11-server-extra | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 | Sep 9, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub