A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-glxUpgrade xorg-x11-driversUpgrade libglvndUpgrade mesa-libgbm-develUpgrade libglvnd-openglUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade libglvnd-develUpgrade libglvnd-eglUpgrade libinput-develUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade libwacom-devel | May 4, 2022 | Aug 5, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Aug 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland | Jan 27, 2021 | Aug 5, 2020 |
| Centos_linux | — | Upgrade libglvnd-glesUpgrade xorg-x11-server-Xnest-debuginfoUpgrade drm-utils-debuginfoUpgrade libglvnd-develUpgrade xorg-x11-server-develUpgrade libglvnd-debugsourceUpgrade libdrm-debuginfoUpgrade libglvnd-core-develUpgrade mesa-libglapiUpgrade xorg-x11-server-debugsourceUpgrade libdrm-develUpgrade libdrmUpgrade mesa-libEGL-develUpgrade mesa-libEGLUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-eglUpgrade mesa-debuginfoUpgrade libX11-commonUpgrade libinput-utils-debuginfoUpgrade libwacom-debuginfoUpgrade libwacom-debugsourceUpgrade libinput-debuginfoUpgrade mesa-libgbmUpgrade xorg-x11-server-XdmxUpgrade libX11-xcb-debuginfoUpgrade mesa-libGL-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libdrm-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade egl-wayland-debugsourceUpgrade libinput-debugsourceUpgrade mesa-libGLUpgrade libglvnd-openglUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-driversUpgrade mesa-libOSMesaUpgrade libinput-utilsUpgrade mesa-libGL-debuginfoUpgrade mesa-filesystemUpgrade libglvnd-glxUpgrade libinputUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacom-dataUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade mesa-libOSMesa-debuginfoUpgrade libX11-xcbUpgrade libglvnd-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-libglapi-debuginfoUpgrade libwacomUpgrade xorg-x11-server-XvfbUpgrade mesa-vulkan-driversUpgrade mesa-libEGL-debuginfoUpgrade mesa-dri-driversUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libX11-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade egl-waylandUpgrade libX11-develUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XephyrUpgrade mesa-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade libglvndUpgrade egl-wayland-debuginfoUpgrade libX11-debugsourceUpgrade libX11 | Dec 15, 2020 | Aug 5, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Aug 5, 2020 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xwaylandUpgrade xorg-dmxUpgrade xephyrUpgrade xorg-nestserverUpgrade xorg-server | Aug 2, 2020 | Aug 1, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Feb 22, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Dec 15, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Aug 5, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xvnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/header/x11-protocols to version 7.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Aug 5, 2020 |
| Oracle_linux | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade libX11-develUpgrade libwacom-dataUpgrade libglvnd-eglUpgrade libglvndUpgrade libwacom-develUpgrade mesa-vdpau-driversUpgrade mesa-dri-driversUpgrade mesa-filesystemUpgrade xorg-x11-driversUpgrade xorg-x11-server-commonUpgrade libX11-commonUpgrade xorg-x11-server-XwaylandUpgrade libwacomUpgrade xorg-x11-server-XephyrUpgrade libX11-xcbUpgrade egl-waylandUpgrade mesa-libxatrackerUpgrade libglvnd-openglUpgrade libinputUpgrade libinput-develUpgrade xorg-x11-server-XvfbUpgrade mesa-libgbmUpgrade mesa-libEGL-develUpgrade xorg-x11-server-develUpgrade libdrmUpgrade mesa-libglapiUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-develUpgrade mesa-libGLUpgrade libglvnd-glxUpgrade libX11Upgrade xorg-x11-server-XdmxUpgrade libglvnd-develUpgrade libinput-utilsUpgrade xorg-x11-server-XnestUpgrade mesa-libGL-develUpgrade mesa-libgbm-develUpgrade mesa-libEGLUpgrade mesa-vulkan-driversUpgrade mesa-libOSMesaUpgrade mesa-vulkan-develUpgrade libdrm-develUpgrade libglvnd-gles | Dec 15, 2020 | Jul 31, 2020 |
| Redhat_linux | — | Upgrade libinput-utils-debuginfoUpgrade mesa-libGL-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGLUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinput-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libinputUpgrade libX11-develUpgrade libX11-xcbUpgrade xorg-x11-server-debuginfoUpgrade mesa-libOSMesa-develUpgrade libwacom-debuginfoUpgrade libX11-commonUpgrade egl-waylandUpgrade mesa-libGL-develUpgrade libX11-debugsourceUpgrade egl-wayland-debugsourceUpgrade libglvnd-develUpgrade xorg-x11-server-XnestUpgrade mesa-dri-driversUpgrade libglvnd-debugsourceUpgrade libdrm-debugsourceUpgrade xorg-x11-driversUpgrade mesa-libgbm-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade libinput-utilsUpgrade mesa-libgbmUpgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11Upgrade mesa-filesystemUpgrade libinput-test-debuginfoUpgrade libinput-debugsourceUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libglapi-debuginfoUpgrade mesa-debuginfoUpgrade mesa-libEGLUpgrade libX11-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-XdmxUpgrade egl-wayland-debuginfoUpgrade libdrm-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-openglUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-driversUpgrade mesa-vulkan-develUpgrade libdrm-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libxatrackerUpgrade libglvnd-glx-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libOSMesaUpgrade libwacomUpgrade xorg-x11-server-commonUpgrade libwacom-develUpgrade libglvnd-eglUpgrade xorg-x11-server-XorgUpgrade libwacom-dataUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-develUpgrade libwacom-debugsourceUpgrade libdrmUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-sourceUpgrade libglvnd-glxUpgrade drm-utils-debuginfo | Dec 15, 2020 | Aug 5, 2020 |
| Rocky_linux | — | Upgrade libdrm-debugsourceUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libEGL-develUpgrade libX11-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-debuginfoUpgrade mesa-vdpau-driversUpgrade libdrm-develUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-libEGLUpgrade libinput-debugsourceUpgrade mesa-libgbmUpgrade xorg-x11-server-debugsourceUpgrade libX11-xcbUpgrade libX11Upgrade xorg-x11-server-XdmxUpgrade libglvnd-debuginfoUpgrade mesa-filesystemUpgrade libglvnd-develUpgrade libglvnd-glxUpgrade libwacom-debuginfoUpgrade libwacomUpgrade xorg-x11-server-XephyrUpgrade libglvnd-openglUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libGLUpgrade libwacom-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-vulkan-driversUpgrade libglvnd-eglUpgrade libX11-xcb-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-vulkan-develUpgrade xorg-x11-server-develUpgrade mesa-libOSMesaUpgrade libinputUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-libglapiUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XorgUpgrade libinput-develUpgrade libglvnd-core-develUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade mesa-dri-driversUpgrade libdrm-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-glesUpgrade libX11-develUpgrade xorg-x11-server-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libGL-develUpgrade mesa-debugsourceUpgrade libglvnd-debugsourceUpgrade libdrmUpgrade libglvndUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libgbm-develUpgrade egl-wayland-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-driversUpgrade libinput-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libinput-utilsUpgrade egl-wayland | Mar 12, 2024 | Aug 5, 2020 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-XvncUpgrade xorg-x11-server-source | Aug 27, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04 | Sep 3, 2020 | Jul 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub