A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-glesUpgrade mesa-libOSMesa-develUpgrade mesa-libgbm-develUpgrade libinput-develUpgrade libglvnd-eglUpgrade xorg-x11-server-develUpgrade libglvnd-develUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade xorg-x11-server-sourceUpgrade libglvnd-glxUpgrade libglvnd-core-develUpgrade libglvndUpgrade libwacom-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-devel | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libEGLUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-debugsourceUpgrade libwacomUpgrade mesa-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-libEGL-develUpgrade libglvnd-eglUpgrade libwacom-dataUpgrade libinput-debugsourceUpgrade drm-utils-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-libxatrackerUpgrade libX11-debugsourceUpgrade mesa-libOSMesaUpgrade mesa-libGLUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libwacom-debugsourceUpgrade xorg-x11-server-XorgUpgrade libX11-debuginfoUpgrade mesa-vulkan-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade mesa-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libdrmUpgrade xorg-x11-server-commonUpgrade libX11Upgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-filesystemUpgrade libwacom-debuginfoUpgrade mesa-vulkan-driversUpgrade libdrm-develUpgrade mesa-libglapiUpgrade libglvnd-glxUpgrade xorg-x11-server-XwaylandUpgrade mesa-libgbmUpgrade libinputUpgrade libglvnd-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-server-XnestUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-debuginfoUpgrade libX11-develUpgrade libglvnd-glesUpgrade libglvnd-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade egl-wayland-debugsourceUpgrade egl-waylandUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-debuginfoUpgrade mesa-dri-driversUpgrade libinput-utils-debuginfoUpgrade egl-wayland-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libX11-commonUpgrade libinput-utilsUpgrade mesa-libGL-debuginfoUpgrade libglvndUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade libdrm-debugsourceUpgrade libX11-xcbUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libGL-devel | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-serverUpgrade xorg-nestserverUpgrade xorg-dmxUpgrade xephyrUpgrade xorg-vfbserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libwacom-dataUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade libinputUpgrade libX11-develUpgrade mesa-libgbmUpgrade mesa-libOSMesa-develUpgrade egl-waylandUpgrade xorg-x11-server-XephyrUpgrade libinput-develUpgrade libglvnd-eglUpgrade libwacomUpgrade libwacom-develUpgrade xorg-x11-server-develUpgrade mesa-vdpau-driversUpgrade mesa-libGL-develUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade mesa-dri-driversUpgrade mesa-libEGLUpgrade libX11-xcbUpgrade libglvnd-glesUpgrade mesa-filesystemUpgrade libX11-commonUpgrade xorg-x11-server-commonUpgrade mesa-libEGL-develUpgrade libglvnd-glxUpgrade mesa-libGLUpgrade mesa-libOSMesaUpgrade libdrmUpgrade xorg-x11-server-XdmxUpgrade mesa-libgbm-develUpgrade mesa-vulkan-develUpgrade libinput-utilsUpgrade libglvndUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade mesa-vulkan-driversUpgrade libglvnd-develUpgrade libdrm-develUpgrade libglvnd-core-develUpgrade mesa-libglapiUpgrade libX11Upgrade xorg-x11-server-Xorg | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade xorg-x11-server-XnestUpgrade libglvnd-egl-debuginfoUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-debugsourceUpgrade libwacom-debuginfoNo solution existsUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XdmxUpgrade mesa-libgbmUpgrade mesa-libEGLUpgrade libwacom-debugsourceUpgrade libinputUpgrade libX11-xcbUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libwacom-dataUpgrade xorg-x11-server-commonUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libGLUpgrade mesa-libEGL-develUpgrade xorg-x11-server-sourceUpgrade libX11-commonUpgrade mesa-libEGL-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-libOSMesaUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-develUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-develUpgrade egl-wayland-debugsourceUpgrade mesa-libgbm-develUpgrade mesa-libGL-develUpgrade egl-waylandUpgrade xorg-x11-server-XwaylandUpgrade mesa-vulkan-drivers-debuginfoUpgrade libinput-debugsourceUpgrade mesa-filesystemUpgrade libX11-xcb-debuginfoUpgrade libglvnd-openglUpgrade libX11-develUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-driversUpgrade libglvnd-glesUpgrade egl-wayland-debuginfoUpgrade libX11Upgrade libinput-debuginfoUpgrade libinput-utilsUpgrade libglvnd-eglUpgrade mesa-vdpau-driversUpgrade mesa-dri-driversUpgrade mesa-libglapiUpgrade libinput-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libdrmUpgrade libglvnd-glxUpgrade libdrm-develUpgrade libglvnd-core-develUpgrade libwacom-develUpgrade libglvndUpgrade drm-utils-debuginfoUpgrade libX11-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libwacomUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade mesa-debugsourceUpgrade libglvnd-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libinput-utils-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libX11-develUpgrade libX11-debugsourceUpgrade xorg-x11-server-develUpgrade mesa-libxatracker-debuginfoUpgrade libinput-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libGL-develUpgrade mesa-libGLUpgrade libX11-xcbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade egl-wayland-debugsourceUpgrade libinputUpgrade mesa-libEGLUpgrade mesa-libgbm-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XnestUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade libdrm-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade mesa-libgbmUpgrade mesa-libglapiUpgrade libwacom-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-libxatrackerUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libwacomUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libglvnd-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-eglUpgrade mesa-debugsourceUpgrade libinput-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libinput-utils-debuginfoUpgrade libglvnd-glesUpgrade mesa-libGL-debuginfoUpgrade libdrm-develUpgrade libinput-debugsourceUpgrade mesa-filesystemUpgrade libglvnd-openglUpgrade libdrmUpgrade libdrm-debuginfoUpgrade mesa-dri-driversUpgrade mesa-vulkan-driversUpgrade libX11-debuginfoUpgrade mesa-libgbm-develUpgrade xorg-x11-server-debuginfoUpgrade libX11Upgrade libglvnd-core-develUpgrade xorg-x11-server-XorgUpgrade libinput-utilsUpgrade mesa-vulkan-develUpgrade xorg-x11-server-debugsourceUpgrade egl-wayland-debuginfoUpgrade libglvnd-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libwacom-develUpgrade libglvndUpgrade xorg-x11-driversUpgrade mesa-dri-drivers-debuginfoUpgrade egl-waylandUpgrade mesa-debuginfoUpgrade libglvnd-glxUpgrade mesa-libOSMesa | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-wayland | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core-hwe-18.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub