A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvndUpgrade libglvnd-openglUpgrade libwacom-develUpgrade mesa-libOSMesa-develUpgrade xorg-x11-driversUpgrade xorg-x11-server-sourceUpgrade libinput-develUpgrade libglvnd-glxUpgrade xorg-x11-server-develUpgrade libglvnd-eglUpgrade mesa-libgbm-develUpgrade libglvnd-core-develUpgrade libglvnd-develUpgrade libglvnd-gles | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfo | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade xorg-x11-server-XorgUpgrade mesa-libGL-develUpgrade libX11-commonUpgrade libdrm-debugsourceUpgrade egl-wayland-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-XnestUpgrade libglvndUpgrade mesa-debugsourceUpgrade mesa-libglapiUpgrade mesa-libglapi-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-dri-driversUpgrade mesa-libGL-debuginfoUpgrade libinput-utils-debuginfoUpgrade libglvnd-debugsourceUpgrade libX11-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinput-utilsUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGLUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-driversUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libX11-develUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libwacom-debuginfoUpgrade egl-waylandUpgrade libX11-xcbUpgrade mesa-libOSMesa-debuginfoUpgrade libinputUpgrade mesa-libEGLUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-vulkan-develUpgrade drm-utils-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-vulkan-driversUpgrade libglvnd-openglUpgrade libX11Upgrade mesa-libxatrackerUpgrade libglvnd-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-libgbmUpgrade mesa-filesystemUpgrade libinput-test-debuginfoUpgrade libinput-debugsourceUpgrade xorg-x11-server-commonUpgrade mesa-libEGL-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libdrmUpgrade xorg-x11-server-debugsourceUpgrade mesa-libOSMesaUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-dri-drivers-debuginfoUpgrade libwacom-dataUpgrade libwacomUpgrade libdrm-develUpgrade libglvnd-glxUpgrade mesa-vdpau-driversUpgrade libX11-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-debuginfoUpgrade libdrm-debuginfoUpgrade egl-wayland-debuginfoUpgrade libglvnd-egl | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xorg-serverUpgrade xorg-nestserverUpgrade xephyrUpgrade xorg-dmxUpgrade xwayland | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Dec 16, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libglvnd-glxUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-vdpau-driversUpgrade libwacom-dataUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade libX11-xcbUpgrade libwacomUpgrade libinput-develUpgrade libX11-develUpgrade mesa-filesystemUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade libX11Upgrade mesa-libglapiUpgrade libinputUpgrade xorg-x11-server-commonUpgrade libglvndUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade mesa-libxatrackerUpgrade mesa-vulkan-develUpgrade mesa-libGLUpgrade libglvnd-glesUpgrade libX11-commonUpgrade mesa-vulkan-driversUpgrade libglvnd-eglUpgrade libinput-utilsUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-develUpgrade mesa-dri-driversUpgrade libwacom-develUpgrade egl-waylandUpgrade mesa-libGL-develUpgrade mesa-libEGLUpgrade libglvnd-openglUpgrade libdrm-develUpgrade libdrmUpgrade mesa-libgbm-develUpgrade xorg-x11-driversUpgrade mesa-libOSMesaUpgrade mesa-libgbmUpgrade libglvnd-devel | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade libdrmUpgrade mesa-libgbmUpgrade xorg-x11-server-debuginfoUpgrade libinput-utilsUpgrade libglvnd-eglUpgrade xorg-x11-driversUpgrade libglvnd-glesUpgrade libdrm-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-dri-driversUpgrade libinput-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-libGL-debuginfoUpgrade egl-wayland-debugsourceUpgrade libinput-debugsourceUpgrade mesa-libGLUpgrade libglvnd-opengl-debuginfoUpgrade mesa-vulkan-driversUpgrade mesa-libGL-develUpgrade libglvnd-openglUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-debuginfoUpgrade libglvnd-develUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libgbm-develNo solution existsUpgrade mesa-libOSMesaUpgrade libglvndUpgrade libwacom-debugsourceUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade libX11-commonUpgrade xorg-x11-server-debugsourceUpgrade drm-utils-debuginfoUpgrade mesa-vdpau-driversUpgrade libinputUpgrade libX11-debugsourceUpgrade mesa-libEGL-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade libwacom-develUpgrade mesa-filesystemUpgrade libwacom-debuginfoUpgrade libinput-test-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libEGLUpgrade libglvnd-debuginfoUpgrade libX11-debuginfoUpgrade libX11-develUpgrade libdrm-debugsourceUpgrade xorg-x11-server-develUpgrade mesa-libEGL-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libglapiUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libinput-develUpgrade libwacomUpgrade mesa-libxatrackerUpgrade xorg-x11-server-sourceUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11Upgrade egl-waylandUpgrade libX11-xcbUpgrade libwacom-dataUpgrade egl-wayland-debuginfoUpgrade libglvnd-glxUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-vulkan-develUpgrade xorg-x11-server-Xdmx | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade mesa-dri-driversUpgrade mesa-vulkan-develUpgrade egl-wayland-debugsourceUpgrade mesa-vulkan-driversUpgrade libinput-utilsUpgrade mesa-filesystemUpgrade libglvnd-develUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-XorgUpgrade libinput-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-driversUpgrade libX11-debuginfoUpgrade libglvnd-core-develUpgrade libwacom-develUpgrade mesa-vdpau-driversUpgrade mesa-libgbm-develUpgrade libdrm-debuginfoUpgrade libX11-develUpgrade libX11Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libOSMesaUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libglvndUpgrade libglvnd-glxUpgrade egl-waylandUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-openglUpgrade libwacomUpgrade libX11-xcb-debuginfoUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libdrm-develUpgrade libdrmUpgrade libglvnd-debuginfoUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libOSMesa-develUpgrade libinput-utils-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-glesUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-debugsourceUpgrade libdrm-debugsourceUpgrade libX11-xcbUpgrade libinput-develUpgrade mesa-libGLUpgrade xorg-x11-server-develUpgrade mesa-libgbm-debuginfoUpgrade libX11-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libglapiUpgrade libglvnd-eglUpgrade mesa-libgbmUpgrade xorg-x11-server-XephyrUpgrade libglvnd-debugsourceUpgrade mesa-libEGLUpgrade libinputUpgrade mesa-libEGL-debuginfoUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XvfbUpgrade libwacom-debuginfoUpgrade mesa-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade mesa-libxatrackerUpgrade mesa-libGL-develUpgrade libwacom-debugsourceUpgrade mesa-vulkan-drivers-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-extraUpgrade xorg-x11-Xvnc | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro) | Sep 9, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub