A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-glxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade libglvndUpgrade libglvnd-core-develUpgrade libwacom-develUpgrade libglvnd-develUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade mesa-libgbm-develUpgrade libinput-develUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-devel | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libglvnd-glx-debuginfoUpgrade mesa-libEGLUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-eglUpgrade libwacomUpgrade libinput-test-debuginfoUpgrade mesa-vdpau-driversUpgrade libdrmUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-libxatrackerUpgrade xorg-x11-server-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libEGL-develUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libOSMesaUpgrade libwacom-debuginfoUpgrade libX11-debugsourceUpgrade mesa-debuginfoUpgrade mesa-libGLUpgrade libinput-debugsourceUpgrade xorg-x11-server-XephyrUpgrade libdrm-develUpgrade libwacom-debugsourceUpgrade libX11-debuginfoUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-sourceUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-glxUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libwacom-dataUpgrade mesa-filesystemUpgrade xorg-x11-server-commonUpgrade libX11Upgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XorgUpgrade libglvnd-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-dri-driversUpgrade libX11-commonUpgrade libinput-utils-debuginfoUpgrade libglvndUpgrade egl-wayland-debuginfoUpgrade libinput-utilsUpgrade mesa-vdpau-drivers-debuginfoUpgrade libinputUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade libdrm-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-develUpgrade libX11-xcbUpgrade xorg-x11-server-XwaylandUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-debuginfoUpgrade egl-waylandUpgrade egl-wayland-debugsourceUpgrade mesa-libgbmUpgrade libglvnd-debuginfoUpgrade mesa-libGL-develUpgrade libdrm-debuginfoUpgrade libX11-develUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-glesUpgrade xorg-x11-server-XnestUpgrade libglvnd-core-develUpgrade mesa-libGL-debuginfoUpgrade mesa-libEGL-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-vfbserverUpgrade xephyrUpgrade xorg-dmxUpgrade xorg-serverUpgrade xorg-nestserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade xorg-x11-server-XdmxUpgrade libinput-utilsUpgrade mesa-libgbm-develUpgrade libglvndUpgrade libglvnd-develUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade libglvnd-glxUpgrade mesa-libEGL-develUpgrade mesa-libGLUpgrade xorg-x11-server-XorgUpgrade libglvnd-openglUpgrade libdrmUpgrade libX11Upgrade mesa-vulkan-develUpgrade mesa-libglapiUpgrade mesa-vulkan-driversUpgrade mesa-libOSMesaUpgrade xorg-x11-driversUpgrade mesa-libOSMesa-develUpgrade libX11-xcbUpgrade xorg-x11-server-XnestUpgrade libwacomUpgrade libwacom-develUpgrade xorg-x11-server-develUpgrade mesa-vdpau-driversUpgrade libinput-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade libwacom-dataUpgrade xorg-x11-server-XwaylandUpgrade mesa-libgbmUpgrade libglvnd-eglUpgrade egl-waylandUpgrade xorg-x11-server-XvfbUpgrade mesa-libxatrackerUpgrade mesa-libGL-develUpgrade libX11-commonUpgrade libglvnd-glesUpgrade xorg-x11-server-commonUpgrade mesa-filesystemUpgrade libinputUpgrade mesa-libEGLUpgrade mesa-dri-driversUpgrade libX11-devel | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-dri-driversUpgrade xorg-x11-server-XorgUpgrade mesa-libOSMesaUpgrade libX11Upgrade mesa-vdpau-driversUpgrade egl-wayland-debuginfoUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-vulkan-develUpgrade libglvnd-develUpgrade mesa-vulkan-driversUpgrade egl-waylandUpgrade xorg-x11-server-debugsourceUpgrade drm-utils-debuginfoUpgrade libwacomUpgrade libglvnd-openglUpgrade mesa-filesystemUpgrade libglvndUpgrade mesa-libgbm-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-vulkan-drivers-debuginfoUpgrade libdrm-debuginfoUpgrade egl-wayland-debugsourceUpgrade libdrm-develUpgrade libglvnd-core-develUpgrade libX11-debuginfoUpgrade libdrmUpgrade libglvnd-glxUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-driversUpgrade libinput-debugsourceUpgrade mesa-libGL-develUpgrade libinput-utilsUpgrade libinput-debuginfoUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade libX11-develUpgrade libwacom-develUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-develUpgrade libinput-utils-debuginfoUpgrade libinput-test-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libX11-commonNo solution existsUpgrade mesa-libxatrackerUpgrade mesa-libglapiUpgrade xorg-x11-server-sourceUpgrade mesa-debugsourceUpgrade libwacom-debuginfoUpgrade libX11-debugsourceUpgrade libglvnd-debugsourceUpgrade mesa-libGLUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libinputUpgrade libdrm-debugsourceUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-libgbm-debuginfoUpgrade mesa-debuginfoUpgrade xorg-x11-server-XephyrUpgrade libwacom-dataUpgrade libX11-xcbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libEGLUpgrade mesa-libEGL-develUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade mesa-libOSMesa-develUpgrade libinput-develUpgrade mesa-libgbmUpgrade libglvnd-glx-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-common | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libinput-develUpgrade libinputUpgrade libglvnd-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libOSMesa-develUpgrade mesa-libglapi-debuginfoUpgrade mesa-libEGLUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libX11-xcbUpgrade libglvnd-glx-debuginfoUpgrade libwacomUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libgbmUpgrade mesa-libGL-develUpgrade xorg-x11-server-XnestUpgrade libX11-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade libX11-debugsourceUpgrade mesa-debugsourceUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libEGL-develUpgrade libinput-utils-debuginfoUpgrade libglvnd-eglUpgrade libglvnd-gles-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-libGLUpgrade mesa-libxatrackerUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade egl-wayland-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libglapiUpgrade libglvnd-opengl-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-driversUpgrade mesa-libOSMesaUpgrade mesa-debuginfoUpgrade libdrm-develUpgrade libglvnd-glxUpgrade xorg-x11-server-XwaylandUpgrade libwacom-develUpgrade egl-waylandUpgrade libglvndUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libdrmUpgrade mesa-vulkan-driversUpgrade mesa-libgbm-develUpgrade libX11-debuginfoUpgrade libinput-debugsourceUpgrade mesa-filesystemUpgrade libglvnd-openglUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libGL-debuginfoUpgrade libinput-utilsUpgrade libglvnd-develUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-develUpgrade libglvnd-core-develUpgrade xorg-x11-server-debugsourceUpgrade libX11Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-glesUpgrade libdrm-debuginfoUpgrade mesa-dri-drivers | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-extra | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub