A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libinput-develUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade libglvnd-develUpgrade mesa-libOSMesa-develUpgrade mesa-libgbm-develUpgrade xorg-x11-server-develUpgrade libwacom-develUpgrade libglvnd-openglUpgrade libglvnd-glxUpgrade libglvndUpgrade xorg-x11-server-sourceUpgrade libglvnd-core-develUpgrade xorg-x11-drivers | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xnest | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-libEGLUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-glxUpgrade libdrm-develUpgrade xorg-x11-server-debuginfoUpgrade libX11Upgrade mesa-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libxatrackerUpgrade libinput-test-debuginfoUpgrade libwacomUpgrade xorg-x11-server-develUpgrade mesa-libEGL-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade mesa-filesystemUpgrade mesa-vulkan-driversUpgrade mesa-libOSMesaUpgrade libdrmUpgrade libwacom-dataUpgrade libwacom-debugsourceUpgrade xorg-x11-server-commonUpgrade libglvnd-egl-debuginfoUpgrade drm-utils-debuginfoUpgrade mesa-libGLUpgrade xorg-x11-server-sourceUpgrade libX11-xcb-debuginfoUpgrade mesa-libglapiUpgrade libinput-debugsourceUpgrade libwacom-debuginfoUpgrade libX11-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-vdpau-driversUpgrade libglvnd-eglUpgrade libX11-debugsourceUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade libdrm-debugsourceUpgrade libglvnd-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libgbmUpgrade libinputUpgrade libglvnd-debugsourceUpgrade libX11-develUpgrade mesa-libGL-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libX11-commonUpgrade libinput-utils-debuginfoUpgrade libglvndUpgrade xorg-x11-server-XnestUpgrade egl-wayland-debuginfoUpgrade egl-waylandUpgrade libinput-utilsUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-debuginfoUpgrade egl-wayland-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libX11-xcbUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-develUpgrade mesa-libxatracker-debuginfoUpgrade mesa-dri-drivers | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-dmxUpgrade xephyrUpgrade xorg-vfbserverUpgrade xorg-nestserverUpgrade xorg-serverUpgrade xwayland | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libinput-develUpgrade libwacom-develUpgrade mesa-vdpau-driversUpgrade mesa-libEGLUpgrade libwacomUpgrade xorg-x11-server-develUpgrade mesa-libgbmUpgrade egl-waylandUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-eglUpgrade libwacom-dataUpgrade mesa-libxatrackerUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade mesa-libGL-develUpgrade libX11-develUpgrade libinputUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade libX11-commonUpgrade libglvnd-glesUpgrade mesa-dri-driversUpgrade mesa-filesystemUpgrade xorg-x11-server-commonUpgrade libX11-xcbUpgrade mesa-libGLUpgrade mesa-vulkan-develUpgrade libglvnd-glxUpgrade libglvndUpgrade xorg-x11-server-XorgUpgrade mesa-libEGL-develUpgrade libglvnd-core-develUpgrade libinput-utilsUpgrade mesa-libgbm-develUpgrade xorg-x11-server-XdmxUpgrade libdrmUpgrade libX11Upgrade mesa-libglapiUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade mesa-vulkan-driversUpgrade libdrm-develUpgrade libglvnd-develUpgrade mesa-libOSMesa | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade drm-utils-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libdrm-develUpgrade mesa-vulkan-driversUpgrade libX11Upgrade libglvnd-glxUpgrade egl-wayland-debugsourceUpgrade libinput-utilsUpgrade mesa-dri-driversUpgrade egl-waylandUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-driversUpgrade libX11-develUpgrade libglvnd-develUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-debugsourceUpgrade mesa-libgbm-develUpgrade mesa-libGL-debuginfoUpgrade mesa-libGL-develUpgrade mesa-filesystemUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libdrm-debuginfoUpgrade libdrmUpgrade libglvnd-glesUpgrade xorg-x11-server-XwaylandUpgrade mesa-libOSMesaUpgrade libinput-debuginfoUpgrade xorg-x11-server-XorgUpgrade libglvnd-openglUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-vulkan-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-eglUpgrade libX11-debuginfoUpgrade libglvnd-core-develUpgrade libglvndUpgrade libwacomUpgrade libwacom-develUpgrade egl-wayland-debuginfoUpgrade mesa-vdpau-driversUpgrade libinput-test-debuginfoUpgrade mesa-libxatrackerUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-sourceUpgrade mesa-libglapiUpgrade libdrm-debugsourceUpgrade libinput-utils-debuginfoNo solution existsUpgrade libX11-commonUpgrade libwacom-debuginfoUpgrade mesa-debuginfoUpgrade xorg-x11-server-XnestUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-develUpgrade libglvnd-egl-debuginfoUpgrade mesa-libEGLUpgrade xorg-x11-server-XdmxUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XvfbUpgrade libglvnd-gles-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-commonUpgrade libwacom-debugsourceUpgrade mesa-libOSMesa-develUpgrade mesa-libgbmUpgrade libX11-xcbUpgrade mesa-libGLUpgrade libglvnd-debuginfoUpgrade libinputUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGL-debuginfoUpgrade libinput-develUpgrade libwacom-dataUpgrade libglvnd-glx-debuginfoUpgrade libX11-debugsourceUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libgbm-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade egl-waylandUpgrade libglvndUpgrade libinput-utilsUpgrade libwacom-develUpgrade xorg-x11-driversUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-XorgUpgrade libglvnd-develUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11Upgrade mesa-libgbm-develUpgrade libglvnd-glesUpgrade libX11-debuginfoUpgrade mesa-dri-driversUpgrade xorg-x11-server-debuginfoUpgrade mesa-filesystemUpgrade libinput-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade mesa-libGL-debuginfoUpgrade libglvnd-glxUpgrade libdrm-develUpgrade libdrmUpgrade mesa-debuginfoUpgrade libdrm-debuginfoUpgrade libglvnd-openglUpgrade mesa-vulkan-develUpgrade mesa-libOSMesaUpgrade egl-wayland-debuginfoUpgrade libglvnd-core-develUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libinputUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libX11-develUpgrade libglvnd-glx-debuginfoUpgrade mesa-libOSMesa-develUpgrade mesa-libGL-develUpgrade libglvnd-eglUpgrade mesa-debugsourceUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade mesa-libxatrackerUpgrade libdrm-debugsourceUpgrade xorg-x11-server-develUpgrade mesa-libEGLUpgrade mesa-libGLUpgrade libX11-debugsourceUpgrade libinput-develUpgrade mesa-libxatracker-debuginfoUpgrade libX11-xcbUpgrade libglvnd-gles-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libwacom-debuginfoUpgrade egl-wayland-debugsourceUpgrade libinput-utils-debuginfoUpgrade mesa-libEGL-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libwacom-debugsourceUpgrade libwacomUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade mesa-vdpau-driversUpgrade mesa-libgbmUpgrade libglvnd-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xvfb | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-serverUpgrade xorg-x11-server-extra | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-coreUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub