A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mesa-libgbm-develUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade xorg-x11-server-develUpgrade libglvnd-develUpgrade libglvnd-core-develUpgrade libglvnd-glxUpgrade mesa-libOSMesa-develUpgrade libglvndUpgrade xorg-x11-server-sourceUpgrade libwacom-develUpgrade libinput-develUpgrade xorg-x11-driversUpgrade libglvnd-opengl | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfo | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libwacom-debuginfoUpgrade xorg-x11-driversUpgrade libX11-develUpgrade mesa-libGLUpgrade libX11-xcbUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libinput-utilsUpgrade libdrm-debugsourceUpgrade libglvnd-glesUpgrade mesa-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade libinput-utils-debuginfoUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade libinput-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-libglapi-debuginfoUpgrade mesa-dri-driversUpgrade libglvnd-core-develUpgrade mesa-libGL-develUpgrade xorg-x11-server-XnestUpgrade libglvndUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinputUpgrade libglvnd-debugsourceUpgrade libX11-commonUpgrade egl-waylandUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libglapiUpgrade libX11-debugsourceUpgrade drm-utils-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-openglUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-debuginfoUpgrade libwacom-dataUpgrade mesa-vulkan-develUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade mesa-libEGL-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libdrmUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade mesa-libgbm-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade egl-wayland-debuginfoUpgrade libX11Upgrade mesa-libOSMesaUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libgbmUpgrade mesa-filesystemUpgrade libinput-debugsourceUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-develUpgrade libdrm-develUpgrade libwacomUpgrade mesa-vdpau-driversUpgrade libglvnd-glxUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libEGLUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-debuginfoUpgrade libX11-debuginfoUpgrade libglvnd-develUpgrade libdrm-debuginfoUpgrade mesa-vulkan-driversUpgrade libglvnd-eglUpgrade xorg-x11-server-Xnest-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-nestserverUpgrade xorg-dmxUpgrade xorg-vfbserverUpgrade xorg-serverUpgrade xwaylandUpgrade xephyr | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Dec 16, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libX11-commonUpgrade mesa-libOSMesaUpgrade mesa-libgbm-develUpgrade xorg-x11-driversUpgrade mesa-libOSMesa-develUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade mesa-vulkan-driversUpgrade libdrmUpgrade egl-waylandUpgrade mesa-dri-driversUpgrade libinput-utilsUpgrade libglvnd-develUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade mesa-libgbmUpgrade mesa-libEGLUpgrade libwacom-develUpgrade mesa-libGL-develUpgrade libglvnd-openglUpgrade mesa-libglapiUpgrade libX11Upgrade libglvndUpgrade libinput-develUpgrade libinputUpgrade xorg-x11-server-XorgUpgrade libwacom-dataUpgrade libwacomUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade libglvnd-glxUpgrade xorg-x11-server-XwaylandUpgrade mesa-libEGL-develUpgrade mesa-vdpau-driversUpgrade mesa-filesystemUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade libX11-xcbUpgrade xorg-x11-server-develUpgrade mesa-libGLUpgrade libX11-develUpgrade mesa-vulkan-devel | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libOSMesaUpgrade libdrmUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-libOSMesa-develUpgrade libglvnd-develUpgrade libwacom-debugsourceUpgrade libglvnd-glesUpgrade mesa-libGLUpgrade mesa-libgbmUpgrade libglvnd-openglUpgrade libdrm-develUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libgbm-develUpgrade mesa-vulkan-driversUpgrade libX11-xcb-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-driversUpgrade libX11-commonUpgrade egl-wayland-debugsourceUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libGL-debuginfoUpgrade mesa-dri-driversUpgrade libinput-utilsUpgrade libinput-debugsourceUpgrade drm-utils-debuginfoUpgrade libglvnd-eglUpgrade mesa-libGL-develNo solution existsUpgrade xorg-x11-server-debuginfoUpgrade libinput-debuginfoUpgrade mesa-debuginfoUpgrade libglvndUpgrade mesa-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libglapiUpgrade xorg-x11-server-XdmxUpgrade mesa-libEGLUpgrade xorg-x11-server-XnestUpgrade libX11-debuginfoUpgrade libX11-develUpgrade libX11Upgrade libglvnd-glxUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libxatrackerUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-sourceUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade libX11-xcbUpgrade libglvnd-debuginfoUpgrade libinputUpgrade mesa-libOSMesa-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-vdpau-driversUpgrade libdrm-debugsourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-filesystemUpgrade libwacom-develUpgrade mesa-vulkan-develUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade egl-waylandUpgrade libwacom-dataUpgrade libglvnd-glx-debuginfoUpgrade libinput-test-debuginfoUpgrade libinput-develUpgrade xorg-x11-server-XwaylandUpgrade libwacomUpgrade xorg-x11-server-Xephyr-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libX11-develUpgrade mesa-libgbm-develUpgrade libglvnd-core-develUpgrade libglvnd-develUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-driversUpgrade libwacom-develUpgrade mesa-vulkan-develUpgrade xorg-x11-server-commonUpgrade libinput-utilsUpgrade libX11Upgrade xorg-x11-server-XorgUpgrade libX11-xcb-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libwacomUpgrade libglvndUpgrade libdrm-develUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-openglUpgrade mesa-libOSMesaUpgrade libdrm-debuginfoUpgrade libinput-debugsourceUpgrade mesa-filesystemUpgrade mesa-vdpau-driversUpgrade mesa-dri-driversUpgrade libdrmUpgrade libglvnd-glxUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade egl-wayland-debuginfoUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade egl-wayland-debugsourceUpgrade egl-waylandUpgrade xorg-x11-server-debugsourceUpgrade libX11-debuginfoUpgrade mesa-libEGL-develUpgrade libglvnd-gles-debuginfoUpgrade libinput-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-debugsourceUpgrade libglvnd-eglUpgrade xorg-x11-server-XvfbUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libOSMesa-develUpgrade mesa-libEGLUpgrade libglvnd-debugsourceUpgrade mesa-libGLUpgrade libglvnd-debuginfoUpgrade libinput-develUpgrade mesa-libglapiUpgrade mesa-libOSMesa-debuginfoUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade mesa-libGL-develUpgrade mesa-debuginfoUpgrade libX11-debugsourceUpgrade libX11-xcbUpgrade libinput-utils-debuginfoUpgrade libglvnd-glesUpgrade libglvnd-egl-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libgbmUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libinput | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-XvncUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-wayland | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04 | Sep 9, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub