A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mesa-libgbm-develUpgrade libglvnd-eglUpgrade xorg-x11-server-develUpgrade libglvnd-develUpgrade libglvnd-glxUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade xorg-x11-server-sourceUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade mesa-libOSMesa-develUpgrade libglvndUpgrade libinput-develUpgrade libwacom-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfo | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-driversUpgrade libdrm-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-openglUpgrade libinput-debugsourceUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-filesystemUpgrade mesa-libgbmUpgrade libX11-xcb-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-debuginfoUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libEGLUpgrade libdrm-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-develUpgrade libglvnd-glx-debuginfoUpgrade mesa-libxatrackerUpgrade libglvnd-glxUpgrade xorg-x11-server-develUpgrade egl-wayland-debuginfoUpgrade mesa-vulkan-develUpgrade libglvnd-debuginfoUpgrade libwacomUpgrade libglvnd-eglUpgrade mesa-dri-drivers-debuginfoUpgrade libX11Upgrade drm-utils-debuginfoUpgrade libwacom-dataUpgrade xorg-x11-server-commonUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-XephyrUpgrade libdrmUpgrade mesa-libEGL-debuginfoUpgrade mesa-libOSMesaUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libX11-debugsourceUpgrade libglvnd-debugsourceUpgrade mesa-libEGL-develUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libglapiUpgrade libinput-debuginfoUpgrade mesa-dri-driversUpgrade libglvnd-gles-debuginfoUpgrade libinputUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-driversUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libGLUpgrade libwacom-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libinput-utilsUpgrade libglvnd-core-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-debugsourceUpgrade libglvnd-glesUpgrade xorg-x11-server-XnestUpgrade libglvndUpgrade xorg-x11-server-XwaylandUpgrade mesa-libglapi-debuginfoUpgrade libX11-commonUpgrade libinput-utils-debuginfoUpgrade libdrm-debugsourceUpgrade egl-wayland-debugsourceUpgrade mesa-libGL-develUpgrade libX11-xcbUpgrade libX11-develUpgrade egl-waylandUpgrade xorg-x11-server-Xorg | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xephyrUpgrade xwaylandUpgrade xorg-nestserverUpgrade xorg-dmxUpgrade xorg-vfbserverUpgrade xorg-server | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Dec 16, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade xorg-x11-server-sourceUpgrade libinput-develUpgrade libX11-develUpgrade libX11-xcbUpgrade mesa-libGLUpgrade xorg-x11-server-XvfbUpgrade libglvndUpgrade libinputUpgrade xorg-x11-server-commonUpgrade libX11Upgrade xorg-x11-server-develUpgrade mesa-libglapiUpgrade xorg-x11-server-XorgUpgrade mesa-libxatrackerUpgrade libwacomUpgrade mesa-vulkan-develUpgrade libwacom-dataUpgrade xorg-x11-server-XdmxUpgrade libglvnd-glxUpgrade xorg-x11-server-XnestUpgrade mesa-libEGL-develUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XwaylandUpgrade mesa-filesystemUpgrade xorg-x11-server-XephyrUpgrade mesa-libGL-develUpgrade mesa-libgbmUpgrade mesa-libOSMesaUpgrade libglvnd-develUpgrade libglvnd-openglUpgrade libdrmUpgrade libglvnd-glesUpgrade libglvnd-eglUpgrade egl-waylandUpgrade libinput-utilsUpgrade libglvnd-core-develUpgrade libwacom-develUpgrade mesa-libgbm-develUpgrade mesa-libEGLUpgrade mesa-vulkan-driversUpgrade libdrm-develUpgrade mesa-libOSMesa-develUpgrade mesa-dri-driversUpgrade xorg-x11-driversUpgrade libX11-common | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-libGL-debuginfoUpgrade libinput-debugsourceUpgrade mesa-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libinput-utilsUpgrade libwacom-debugsourceUpgrade mesa-libOSMesaUpgrade libglvnd-glesUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvndUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-eglUpgrade libX11-commonUpgrade libglvnd-opengl-debuginfoUpgrade mesa-vulkan-driversUpgrade libX11-xcb-debuginfoUpgrade egl-wayland-debugsourceUpgrade mesa-libgbm-develUpgrade mesa-dri-drivers-debuginfoUpgrade drm-utils-debuginfoUpgrade mesa-dri-driversUpgrade libinput-debuginfoUpgrade libglvnd-core-develUpgrade mesa-libGL-develUpgrade libdrm-develNo solution existsUpgrade libdrm-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libdrmUpgrade mesa-libgbmUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-develUpgrade mesa-libOSMesa-develUpgrade mesa-libGLUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libwacom-develUpgrade libglvnd-debuginfoUpgrade libX11-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-filesystemUpgrade xorg-x11-server-XephyrUpgrade libinput-test-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libinput-utils-debuginfoUpgrade libinput-develUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libglapi-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libxatrackerUpgrade libwacomUpgrade libX11-xcbUpgrade libinputUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade egl-waylandUpgrade libglvnd-glx-debuginfoUpgrade libwacom-dataUpgrade xorg-x11-server-XdmxUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XnestUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libglapiUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade libX11Upgrade mesa-libEGL-develUpgrade mesa-libEGLUpgrade libdrm-debugsourceUpgrade xorg-x11-server-develUpgrade libglvnd-debugsourceUpgrade libglvnd-glxUpgrade egl-wayland-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-debugsource | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libX11-xcbUpgrade libglvnd-egl-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libglapiUpgrade xorg-x11-server-XephyrUpgrade libinput-utils-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libEGL-develUpgrade libglvnd-debugsourceUpgrade mesa-libEGLUpgrade xorg-x11-server-XvfbUpgrade mesa-debuginfoUpgrade mesa-libOSMesa-develUpgrade libdrm-debugsourceUpgrade libwacom-debugsourceUpgrade mesa-libxatrackerUpgrade libwacom-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-libGL-develUpgrade xorg-x11-server-XdmxUpgrade libglvnd-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libinput-debuginfoUpgrade libX11-debugsourceUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-eglUpgrade mesa-libgbmUpgrade libinput-develUpgrade mesa-libGLUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libinputUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-glesUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libX11-debuginfoUpgrade mesa-libOSMesaUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-driversUpgrade libinput-debugsourceUpgrade libglvnd-develUpgrade libglvnd-glx-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-vulkan-develUpgrade mesa-dri-driversUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-glxUpgrade libX11-xcb-debuginfoUpgrade libwacomUpgrade libglvnd-openglUpgrade libdrm-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGL-debuginfoUpgrade libdrmUpgrade mesa-vulkan-driversUpgrade libX11Upgrade libX11-develUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-filesystemUpgrade mesa-vdpau-driversUpgrade libdrm-debuginfoUpgrade mesa-libgbm-develUpgrade libwacom-develUpgrade libglvnd-core-develUpgrade egl-waylandUpgrade libglvndUpgrade libinput-utilsUpgrade egl-wayland-debugsource | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-waylandUpgrade xorg-x11-XvncUpgrade xorg-x11-server-extra | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core | Sep 9, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub