A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-driversUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-sourceUpgrade libglvnd-openglUpgrade libinput-develUpgrade libglvndUpgrade libwacom-develUpgrade libglvnd-glxUpgrade libglvnd-core-develUpgrade libglvnd-develUpgrade xorg-x11-server-develUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade mesa-libgbm-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-source | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libinput-test-debuginfoUpgrade mesa-filesystemUpgrade mesa-libgbmUpgrade mesa-vulkan-driversUpgrade libdrm-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-commonUpgrade libdrmUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libinput-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-openglUpgrade mesa-dri-drivers-debuginfoUpgrade drm-utils-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-develUpgrade mesa-libxatrackerUpgrade libglvnd-glxUpgrade xorg-x11-server-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libwacom-dataUpgrade mesa-libOSMesaUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-develUpgrade libglvnd-debuginfoUpgrade libwacomUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XvfbUpgrade mesa-vulkan-drivers-debuginfoUpgrade libX11-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libX11Upgrade xorg-x11-server-develUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-eglUpgrade mesa-libEGLUpgrade libdrm-develUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-driversUpgrade mesa-libGLUpgrade libwacom-debuginfoUpgrade libinputUpgrade mesa-libglapiUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libX11-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-core-develUpgrade libX11-xcbUpgrade libX11-develUpgrade egl-waylandUpgrade libinput-utils-debuginfoUpgrade mesa-debugsourceUpgrade libglvnd-glesUpgrade xorg-x11-server-XwaylandUpgrade libX11-commonUpgrade libglvnd-gles-debuginfoUpgrade mesa-dri-driversUpgrade mesa-libGL-develUpgrade libinput-debuginfoUpgrade egl-wayland-debugsourceUpgrade libdrm-debugsourceUpgrade libglvndUpgrade mesa-libEGL-develUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XnestUpgrade libinput-utils | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-dmxUpgrade xorg-vfbserverUpgrade xwaylandUpgrade xephyrUpgrade xorg-serverUpgrade xorg-nestserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Dec 16, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade mesa-libGLUpgrade libinput-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade libX11-xcbUpgrade libX11-develUpgrade libwacom-dataUpgrade xorg-x11-server-XvfbUpgrade libX11Upgrade libglvndUpgrade libinputUpgrade libglvnd-glxUpgrade mesa-libEGL-develUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XnestUpgrade mesa-filesystemUpgrade mesa-libxatrackerUpgrade mesa-libglapiUpgrade xorg-x11-server-XwaylandUpgrade mesa-vulkan-develUpgrade libwacomUpgrade xorg-x11-server-XorgUpgrade mesa-vulkan-driversUpgrade mesa-dri-driversUpgrade libdrmUpgrade mesa-libOSMesaUpgrade libglvnd-develUpgrade mesa-libOSMesa-develUpgrade mesa-libEGLUpgrade libglvnd-glesUpgrade libglvnd-eglUpgrade libwacom-develUpgrade egl-waylandUpgrade libinput-utilsUpgrade libglvnd-core-develUpgrade xorg-x11-driversUpgrade mesa-libgbmUpgrade mesa-libGL-develUpgrade mesa-libgbm-develUpgrade libglvnd-openglUpgrade libdrm-develUpgrade libX11-common | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade mesa-libglapiUpgrade libdrm-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libwacom-dataUpgrade egl-waylandUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libwacom-develUpgrade xorg-x11-server-XephyrUpgrade mesa-vdpau-driversUpgrade libX11-debuginfoUpgrade libX11Upgrade mesa-vulkan-develUpgrade mesa-libEGL-develUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-XnestUpgrade libinput-develUpgrade libglvnd-gles-debuginfoUpgrade libwacomUpgrade libglvnd-egl-debuginfoUpgrade mesa-debugsourceUpgrade libX11-debugsourceUpgrade xorg-x11-server-XdmxUpgrade libinputUpgrade libinput-utils-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libinput-test-debuginfoUpgrade mesa-libEGLUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-filesystemUpgrade mesa-libEGL-debuginfoUpgrade libwacom-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libglapi-debuginfoUpgrade libX11-develUpgrade mesa-libxatrackerUpgrade libglvnd-glxUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-xcbUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-driversUpgrade libinput-debugsourceUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-debuginfoUpgrade libglvnd-core-develUpgrade mesa-libGL-debuginfoUpgrade libX11-xcb-debuginfoUpgrade egl-wayland-debugsourceUpgrade drm-utils-debuginfoUpgrade libdrmUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-eglUpgrade mesa-libgbm-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libGLUpgrade libglvnd-develUpgrade mesa-libOSMesa-develUpgrade libglvnd-glesUpgrade mesa-libOSMesaUpgrade libdrm-debuginfoUpgrade libdrm-develUpgrade xorg-x11-server-debuginfoUpgrade libinput-utilsUpgrade libglvnd-opengl-debuginfoUpgrade libglvndUpgrade mesa-vulkan-driversUpgrade mesa-dri-driversUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-commonUpgrade mesa-libgbmUpgrade libglvnd-openglUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoNo solution existsUpgrade mesa-libGL-devel | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libinput-develUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libGLUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XnestUpgrade mesa-libGL-develUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-glesUpgrade mesa-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libEGL-develUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libwacom-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-XephyrUpgrade libinput-debuginfoUpgrade mesa-libEGLUpgrade libinput-utils-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libX11-debugsourceUpgrade libX11-xcbUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-debugsourceUpgrade libglvnd-eglUpgrade libinputUpgrade mesa-libglapiUpgrade mesa-libOSMesa-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-libgbmUpgrade libX11Upgrade mesa-dri-drivers-debuginfoUpgrade libinput-utilsUpgrade libX11-debuginfoUpgrade egl-wayland-debuginfoUpgrade libglvnd-glxUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-filesystemUpgrade libdrmUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGL-debuginfoUpgrade libwacomUpgrade libdrm-develUpgrade libglvnd-openglUpgrade libX11-xcb-debuginfoUpgrade mesa-vdpau-driversUpgrade libX11-develUpgrade mesa-libgbm-develUpgrade libwacom-develUpgrade libglvnd-core-develUpgrade mesa-dri-driversUpgrade mesa-vulkan-develUpgrade libglvnd-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-vulkan-driversUpgrade libglvndUpgrade xorg-x11-server-Xorg-debuginfoUpgrade egl-wayland-debugsourceUpgrade egl-waylandUpgrade mesa-libOSMesaUpgrade libinput-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-drivers | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-XvncUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-source | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core-hwe-18.04 | Sep 9, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub