A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mesa-libOSMesa-develUpgrade libglvnd-core-develUpgrade mesa-libgbm-develUpgrade libglvnd-glesUpgrade libglvndUpgrade libinput-develUpgrade libwacom-develUpgrade xorg-x11-server-sourceUpgrade libglvnd-openglUpgrade libglvnd-glxUpgrade xorg-x11-server-develUpgrade libglvnd-eglUpgrade xorg-x11-driversUpgrade libglvnd-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade mesa-libEGL-develUpgrade libX11-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-XnestUpgrade libdrm-debugsourceUpgrade libinput-debugsourceUpgrade libwacom-debuginfoUpgrade libX11Upgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade libX11-xcbUpgrade libX11-commonUpgrade mesa-libgbm-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libinput-debuginfoUpgrade libwacom-debugsourceUpgrade libwacom-dataUpgrade libglvnd-eglUpgrade xorg-x11-server-XephyrUpgrade mesa-libGL-develUpgrade mesa-libglapiUpgrade mesa-libxatrackerUpgrade libinput-utils-debuginfoUpgrade mesa-libGLUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade libglvnd-egl-debuginfoUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-debuginfoUpgrade mesa-libEGLUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libOSMesaUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-libgbmUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade drm-utils-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-openglUpgrade libX11-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-driversUpgrade mesa-libGL-debuginfoUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-XorgUpgrade libglvnd-glxUpgrade egl-waylandUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-driversUpgrade libX11-develUpgrade libdrm-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade egl-wayland-debuginfoUpgrade libglvnd-glesUpgrade libinput-utilsUpgrade libdrmUpgrade mesa-vdpau-driversUpgrade libinputUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-filesystemUpgrade mesa-dri-driversUpgrade egl-wayland-debugsourceUpgrade mesa-vulkan-develUpgrade libX11-xcb-debuginfoUpgrade libglvnd-develUpgrade libglvnd-core-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-libxatracker-debuginfoUpgrade libwacomUpgrade libglvndUpgrade libdrm-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-serverUpgrade xephyrUpgrade xwaylandUpgrade xorg-nestserverUpgrade xorg-dmxUpgrade xorg-vfbserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade mesa-dri-driversUpgrade mesa-vdpau-driversUpgrade mesa-vulkan-develUpgrade libwacom-dataUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade libX11Upgrade xorg-x11-server-develUpgrade libwacom-develUpgrade xorg-x11-server-sourceUpgrade mesa-filesystemUpgrade xorg-x11-server-XorgUpgrade mesa-libglapiUpgrade xorg-x11-server-XvfbUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XdmxUpgrade libglvndUpgrade libinputUpgrade libX11-develUpgrade libwacomUpgrade libinput-develUpgrade libX11-xcbUpgrade libglvnd-glxUpgrade mesa-libEGL-develUpgrade xorg-x11-server-commonUpgrade egl-waylandUpgrade libglvnd-eglUpgrade libglvnd-develUpgrade mesa-libgbmUpgrade libglvnd-glesUpgrade mesa-libgbm-develUpgrade libX11-commonUpgrade mesa-vulkan-driversUpgrade mesa-libOSMesaUpgrade libdrmUpgrade mesa-libGL-develUpgrade libinput-utilsUpgrade mesa-libOSMesa-develUpgrade libdrm-develUpgrade mesa-libGLUpgrade mesa-libEGLUpgrade xorg-x11-driversUpgrade libglvnd-core-develUpgrade libglvnd-opengl | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-commonUpgrade libinput-test-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-libEGLUpgrade libwacom-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libdrm-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade libX11Upgrade libwacomUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-dri-driversUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacom-debugsourceUpgrade libinput-develUpgrade egl-wayland-debuginfoUpgrade libX11-commonUpgrade mesa-libEGL-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-XvfbUpgrade mesa-libgbm-debuginfoUpgrade libinputUpgrade xorg-x11-server-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-libgbmUpgrade mesa-vulkan-driversUpgrade mesa-filesystemUpgrade libwacom-dataUpgrade libglvnd-glxUpgrade xorg-x11-driversUpgrade libglvnd-glx-debuginfoUpgrade mesa-vdpau-driversUpgrade libX11-develUpgrade libglvnd-develNo solution existsUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-sourceUpgrade libglvnd-eglUpgrade mesa-vulkan-develUpgrade libglvnd-openglUpgrade libX11-debuginfoUpgrade libwacom-debuginfoUpgrade libglvndUpgrade egl-wayland-debugsourceUpgrade libX11-xcbUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-glesUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-debuginfoUpgrade libglvnd-core-develUpgrade libinput-utils-debuginfoUpgrade mesa-libGL-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debugsourceUpgrade mesa-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade mesa-libglapiUpgrade mesa-libglapi-debuginfoUpgrade libdrm-develUpgrade drm-utils-debuginfoUpgrade mesa-libgbm-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-debugsourceUpgrade libinput-debugsourceUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XdmxUpgrade libX11-debugsourceUpgrade mesa-libGL-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libGLUpgrade xorg-x11-server-XorgUpgrade mesa-libxatrackerUpgrade libinput-utilsUpgrade mesa-libEGL-develUpgrade mesa-libOSMesaUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-debugsourceUpgrade libdrm | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade mesa-libGL-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libglvnd-glxUpgrade libdrm-develUpgrade libglvnd-openglUpgrade libglvnd-core-develUpgrade libglvnd-glx-debuginfoUpgrade mesa-filesystemUpgrade libinput-debugsourceUpgrade libdrm-debuginfoUpgrade libglvndUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade mesa-debuginfoUpgrade mesa-vulkan-driversUpgrade libX11Upgrade libdrmUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-debuginfoUpgrade mesa-libOSMesaUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libwacom-develUpgrade xorg-x11-server-debuginfoUpgrade libinput-utilsUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-driversUpgrade mesa-libgbm-develUpgrade egl-wayland-debuginfoUpgrade egl-waylandUpgrade mesa-dri-driversUpgrade mesa-vulkan-develUpgrade libglvnd-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libxatrackerUpgrade libinput-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade mesa-libgbmUpgrade libX11-xcbUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-commonUpgrade libglvnd-eglUpgrade libX11-develUpgrade mesa-libEGL-debuginfoUpgrade libwacom-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libdrm-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libOSMesa-develUpgrade libglvnd-gles-debuginfoUpgrade libX11-debugsourceUpgrade libinput-utils-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XnestUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGLUpgrade libglvnd-egl-debuginfoUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-XephyrUpgrade mesa-libGL-develUpgrade libwacomUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-develUpgrade libinput-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libinputUpgrade mesa-libEGLUpgrade libglvnd-debugsourceUpgrade libglvnd-glesUpgrade libglvnd-debuginfoUpgrade mesa-libglapiUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libwacom-debugsource | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xorg-x11-XvncUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-source | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-coreUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub