A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade mesa-libOSMesa-develUpgrade libglvndUpgrade xorg-x11-server-sourceUpgrade libwacom-develUpgrade libinput-develUpgrade mesa-libgbm-develUpgrade xorg-x11-server-develUpgrade libglvnd-glxUpgrade libglvnd-develUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade libglvnd-egl | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libglvnd-develUpgrade libwacomUpgrade mesa-libEGLUpgrade mesa-vulkan-drivers-debuginfoUpgrade libX11-debuginfoUpgrade egl-wayland-debuginfoUpgrade libglvnd-eglUpgrade libX11Upgrade xorg-x11-server-develUpgrade libglvnd-glx-debuginfoUpgrade libdrm-develUpgrade mesa-vdpau-driversUpgrade libglvnd-glxUpgrade mesa-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-develUpgrade mesa-libOSMesaUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XephyrUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-driversUpgrade libdrm-debuginfoUpgrade drm-utils-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libglvnd-openglUpgrade mesa-libxatrackerUpgrade libwacom-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libdrmUpgrade libinput-debugsourceUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libinput-test-debuginfoUpgrade libwacom-dataUpgrade mesa-filesystemUpgrade mesa-libgbmUpgrade xorg-x11-driversUpgrade mesa-libGLUpgrade libwacom-debuginfoUpgrade libinput-utilsUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libinputUpgrade libX11-debugsourceUpgrade mesa-libEGL-develUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGL-debuginfoUpgrade egl-waylandUpgrade libX11-xcbUpgrade libdrm-debugsourceUpgrade egl-wayland-debugsourceUpgrade libinput-utils-debuginfoUpgrade libinput-debuginfoUpgrade xorg-x11-server-XnestUpgrade libglvnd-core-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-debugsourceUpgrade libglvnd-glesUpgrade mesa-libGL-develUpgrade mesa-dri-driversUpgrade mesa-libglapi-debuginfoUpgrade libglvndUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade mesa-libglapiUpgrade libX11-commonUpgrade libX11-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xephyrUpgrade xorg-serverUpgrade xorg-vfbserverUpgrade xorg-nestserverUpgrade xorg-dmxUpgrade xwayland | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Dec 16, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade xorg-x11-server-XvfbUpgrade mesa-filesystemUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade mesa-libEGL-develUpgrade mesa-vdpau-driversUpgrade libX11Upgrade mesa-libglapiUpgrade libwacomUpgrade mesa-libxatrackerUpgrade libglvnd-glxUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade libglvndUpgrade libinputUpgrade libwacom-dataUpgrade libX11-xcbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade libX11-develUpgrade mesa-libGLUpgrade xorg-x11-server-commonUpgrade libinput-develUpgrade xorg-x11-server-XdmxUpgrade libwacom-develUpgrade mesa-libGL-develUpgrade libglvnd-eglUpgrade mesa-vulkan-driversUpgrade xorg-x11-driversUpgrade mesa-libgbm-develUpgrade libX11-commonUpgrade libdrmUpgrade mesa-libEGLUpgrade libglvnd-openglUpgrade libdrm-develUpgrade mesa-dri-driversUpgrade mesa-libOSMesaUpgrade libglvnd-develUpgrade mesa-libgbmUpgrade libinput-utilsUpgrade libglvnd-core-develUpgrade egl-waylandUpgrade libglvnd-glesUpgrade mesa-libOSMesa-devel | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade libX11-develUpgrade mesa-libEGL-develUpgrade mesa-debugsourceUpgrade libinput-test-debuginfoUpgrade libglvnd-glxUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XnestUpgrade mesa-libEGLUpgrade xorg-x11-server-XorgUpgrade libwacom-develUpgrade libwacom-dataUpgrade libglvnd-glx-debuginfoUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libinput-develUpgrade libwacomUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-XdmxUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-debuginfoUpgrade libdrm-debugsourceUpgrade libX11Upgrade libwacom-debuginfoUpgrade libinputUpgrade xorg-x11-server-develUpgrade libX11-debugsourceUpgrade xorg-x11-server-XvfbUpgrade egl-waylandUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libgbm-debuginfoUpgrade mesa-libxatrackerUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-vulkan-develUpgrade libX11-debuginfoUpgrade xorg-x11-server-sourceUpgrade egl-wayland-debuginfoUpgrade mesa-filesystemUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libglapiUpgrade libX11-xcbUpgrade egl-wayland-debugsourceUpgrade libglvnd-eglUpgrade libwacom-debugsourceUpgrade xorg-x11-driversUpgrade mesa-libgbmUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libdrmUpgrade xorg-x11-server-debugsourceUpgrade mesa-libgbm-develUpgrade libglvnd-opengl-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade mesa-libOSMesaUpgrade libglvndUpgrade libdrm-debuginfoUpgrade libglvnd-glesUpgrade libinput-debugsourceNo solution existsUpgrade libinput-debuginfoUpgrade mesa-libOSMesa-develUpgrade mesa-libGL-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-driversUpgrade mesa-debuginfoUpgrade libX11-commonUpgrade mesa-dri-driversUpgrade libglvnd-openglUpgrade drm-utils-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvnd-develUpgrade libinput-utilsUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libGL | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libX11-xcb-debuginfoUpgrade libglvnd-core-develUpgrade libglvnd-develUpgrade libinput-debugsourceUpgrade mesa-libGL-debuginfoUpgrade libwacom-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvndUpgrade libwacomUpgrade libglvnd-openglUpgrade mesa-libgbm-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libdrm-debuginfoUpgrade egl-waylandUpgrade egl-wayland-debuginfoUpgrade mesa-vulkan-driversUpgrade egl-wayland-debugsourceUpgrade mesa-vdpau-driversUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libdrmUpgrade libX11-develUpgrade mesa-filesystemUpgrade libdrm-develUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-driversUpgrade xorg-x11-server-debugsourceUpgrade mesa-libOSMesaUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XorgUpgrade mesa-dri-driversUpgrade libglvnd-glxUpgrade libX11Upgrade libX11-debuginfoUpgrade xorg-x11-server-commonUpgrade libinput-utilsUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libEGL-develUpgrade mesa-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-libEGLUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-eglUpgrade libglvnd-debugsourceUpgrade libX11-debugsourceUpgrade xorg-x11-server-XdmxUpgrade mesa-libxatrackerUpgrade libwacom-debugsourceUpgrade libwacom-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libGL-develUpgrade xorg-x11-server-XnestUpgrade mesa-libEGL-debuginfoUpgrade mesa-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libOSMesa-develUpgrade mesa-libglapiUpgrade mesa-libglapi-debuginfoUpgrade libX11-xcbUpgrade libinput-utils-debuginfoUpgrade libinput-debuginfoUpgrade libglvnd-glesUpgrade libdrm-debugsourceUpgrade mesa-libgbmUpgrade libinputUpgrade libglvnd-debuginfoUpgrade mesa-libGLUpgrade libglvnd-egl-debuginfoUpgrade libinput-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-XvncUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-wayland | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-coreUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 | Sep 9, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub