A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mesa-libOSMesa-develUpgrade libinput-develUpgrade libglvnd-glesUpgrade libglvnd-eglUpgrade mesa-libgbm-develUpgrade xorg-x11-server-develUpgrade libglvnd-develUpgrade libglvnd-glxUpgrade xorg-x11-server-sourceUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade libglvndUpgrade libglvnd-core-develUpgrade libwacom-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-common | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade xorg-x11-server-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade libdrm-develUpgrade libglvnd-glxUpgrade libX11Upgrade mesa-vdpau-driversUpgrade libglvnd-egl-debuginfoUpgrade mesa-libOSMesaUpgrade libglvnd-eglUpgrade mesa-filesystemUpgrade mesa-debugsourceUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XdmxUpgrade libwacom-debuginfoUpgrade libdrmUpgrade mesa-vulkan-develUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-XorgUpgrade libwacom-debugsourceUpgrade libX11-debugsourceUpgrade mesa-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-libEGLUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libGLUpgrade drm-utils-debuginfoUpgrade mesa-libEGL-develUpgrade libwacom-dataUpgrade libwacomUpgrade libX11-debuginfoUpgrade libinput-debugsourceUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XephyrUpgrade libinput-utils-debuginfoUpgrade libglvndUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-dri-driversUpgrade libX11-commonUpgrade libglvnd-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-libgbmUpgrade libinputUpgrade mesa-libGL-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade libinput-utilsUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XnestUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-debugsourceUpgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade mesa-libxatracker-debuginfoUpgrade libX11-xcbUpgrade libglvnd-opengl-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade egl-wayland-debuginfoUpgrade mesa-libGL-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade egl-wayland-debugsourceUpgrade egl-waylandUpgrade libinput-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-serverUpgrade xephyrUpgrade xorg-dmxUpgrade xorg-vfbserverUpgrade xorg-nestserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade mesa-libOSMesa-develUpgrade egl-waylandUpgrade xorg-x11-server-XephyrUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade libX11-develUpgrade mesa-libGL-develUpgrade xorg-x11-server-XwaylandUpgrade libwacom-dataUpgrade libX11-xcbUpgrade libwacomUpgrade libglvnd-eglUpgrade mesa-libgbmUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade libinputUpgrade libX11-commonUpgrade libinput-develUpgrade mesa-filesystemUpgrade mesa-libEGLUpgrade libglvnd-glesUpgrade libwacom-develUpgrade mesa-dri-driversUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-develUpgrade libglvndUpgrade libglvnd-glxUpgrade libglvnd-develUpgrade mesa-libOSMesaUpgrade libdrmUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade mesa-libGLUpgrade mesa-libEGL-develUpgrade libinput-utilsUpgrade libglvnd-core-develUpgrade xorg-x11-driversUpgrade mesa-libglapiUpgrade libX11Upgrade libglvnd-openglUpgrade mesa-vulkan-develUpgrade mesa-libgbm-develUpgrade mesa-vulkan-driversUpgrade libdrm-devel | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade libglvnd-opengl-debuginfoUpgrade libinputUpgrade libX11-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libEGLUpgrade mesa-libEGL-develUpgrade mesa-libOSMesa-develUpgrade libwacom-dataUpgrade xorg-x11-server-XdmxUpgrade libwacom-debugsourceUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XephyrUpgrade libglvnd-egl-debuginfoUpgrade mesa-libgbmUpgrade mesa-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-develUpgrade mesa-libglapiUpgrade libX11-xcbUpgrade mesa-vdpau-drivers-debuginfoUpgrade libinput-test-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libxatrackerUpgrade xorg-x11-server-sourceUpgrade libX11-commonNo solution existsUpgrade mesa-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade libinput-develUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libGLUpgrade xorg-x11-server-debugsourceUpgrade mesa-libGL-debuginfoUpgrade libinput-utilsUpgrade libglvnd-openglUpgrade xorg-x11-server-XwaylandUpgrade libdrmUpgrade egl-wayland-debugsourceUpgrade mesa-filesystemUpgrade mesa-libGL-develUpgrade libinput-debugsourceUpgrade drm-utils-debuginfoUpgrade libglvndUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade libX11-debuginfoUpgrade libglvnd-eglUpgrade libinput-debuginfoUpgrade mesa-vdpau-driversUpgrade mesa-dri-driversUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade egl-waylandUpgrade libglvnd-glesUpgrade xorg-x11-server-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-libOSMesaUpgrade xorg-x11-server-XorgUpgrade libX11Upgrade mesa-vulkan-driversUpgrade libglvnd-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libgbm-develUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-driversUpgrade libwacom-develUpgrade libdrm-debuginfoUpgrade libwacomUpgrade libglvnd-glxUpgrade libX11-develUpgrade xorg-x11-server-Xwayland-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libdrm-debugsourceUpgrade mesa-libglapiUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XvfbUpgrade libglvnd-debuginfoUpgrade egl-wayland-debugsourceUpgrade libinput-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libinputUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libX11-xcbUpgrade libglvnd-egl-debuginfoUpgrade libinput-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XephyrUpgrade libwacom-debugsourceUpgrade mesa-libEGL-develUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-libGLUpgrade libX11-debugsourceUpgrade libwacomUpgrade libX11-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libgbmUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libEGLUpgrade mesa-libGL-develUpgrade mesa-libOSMesa-develUpgrade libglvnd-gles-debuginfoUpgrade libwacom-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-eglUpgrade mesa-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libwacom-develUpgrade libglvndUpgrade mesa-filesystemUpgrade libdrmUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-libGL-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libgbm-develUpgrade mesa-vulkan-driversUpgrade libX11-debuginfoUpgrade mesa-dri-driversUpgrade libdrm-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-driversUpgrade libinput-utilsUpgrade libglvnd-develUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade libglvnd-glesUpgrade libglvnd-glxUpgrade libinput-debugsourceUpgrade mesa-libOSMesaUpgrade libglvnd-openglUpgrade libX11Upgrade libdrm-develUpgrade xorg-x11-server-debugsourceUpgrade mesa-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-extra | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub