A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvndUpgrade xorg-x11-driversUpgrade libglvnd-core-develUpgrade xorg-x11-server-sourceUpgrade libwacom-develUpgrade libglvnd-openglUpgrade libglvnd-glxUpgrade libinput-develUpgrade xorg-x11-server-develUpgrade mesa-libOSMesa-develUpgrade mesa-libgbm-develUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade libglvnd-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade libdrmUpgrade libX11-xcb-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-libglapiUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-libGLUpgrade libglvnd-eglUpgrade libX11Upgrade mesa-libOSMesaUpgrade libglvnd-glx-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-libEGLUpgrade mesa-libxatrackerUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-commonUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debugsourceUpgrade libinput-debugsourceUpgrade mesa-vdpau-driversUpgrade libX11-debugsourceUpgrade libwacom-dataUpgrade libglvnd-egl-debuginfoUpgrade mesa-filesystemUpgrade libwacomUpgrade libglvnd-glxUpgrade libdrm-develUpgrade libwacom-debugsourceUpgrade mesa-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade mesa-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-libGL-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade libdrm-debugsourceUpgrade libinput-utilsUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-core-develUpgrade libdrm-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-develUpgrade libX11-xcbUpgrade libglvnd-opengl-debuginfoUpgrade libinput-debuginfoUpgrade egl-waylandUpgrade egl-wayland-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-dri-driversUpgrade libX11-commonUpgrade libinput-utils-debuginfoUpgrade libglvndUpgrade egl-wayland-debuginfoUpgrade libglvnd-debuginfoUpgrade libglvnd-glesUpgrade mesa-libgbmUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XnestUpgrade libinputUpgrade mesa-libGL-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libgbm-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xwaylandUpgrade xephyrUpgrade xorg-serverUpgrade xorg-nestserverUpgrade xorg-dmxUpgrade xorg-vfbserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade mesa-vdpau-driversUpgrade mesa-libOSMesa-develUpgrade libinputUpgrade xorg-x11-server-develUpgrade libinput-develUpgrade libwacom-develUpgrade mesa-libGL-develUpgrade mesa-libxatrackerUpgrade libX11-commonUpgrade libX11-xcbUpgrade mesa-libgbmUpgrade mesa-dri-driversUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade egl-waylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade mesa-filesystemUpgrade mesa-libEGLUpgrade libwacom-dataUpgrade xorg-x11-server-XnestUpgrade libwacomUpgrade xorg-x11-server-sourceUpgrade libX11-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade libglvnd-develUpgrade mesa-libEGL-develUpgrade libinput-utilsUpgrade mesa-libGLUpgrade libglvnd-glxUpgrade libglvndUpgrade mesa-vulkan-driversUpgrade libdrm-develUpgrade mesa-vulkan-develUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade mesa-libglapiUpgrade libX11Upgrade mesa-libOSMesaUpgrade mesa-libgbm-develUpgrade libdrmUpgrade xorg-x11-server-XdmxUpgrade libglvnd-core-devel | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade libwacom-dataUpgrade libglvnd-egl-debuginfoUpgrade mesa-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-libEGLUpgrade libwacom-debuginfoUpgrade libX11-commonUpgrade mesa-libglapiUpgrade libX11-xcbUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-XnestUpgrade libglvnd-gles-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-debugsourceUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-develUpgrade libinput-debugsourceUpgrade mesa-vdpau-driversUpgrade egl-wayland-debuginfoNo solution existsUpgrade libX11Upgrade libinput-utilsUpgrade xorg-x11-server-XorgUpgrade drm-utils-debuginfoUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-vulkan-develUpgrade libglvnd-openglUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libdrmUpgrade egl-wayland-debugsourceUpgrade mesa-filesystemUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-develUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-driversUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-eglUpgrade libX11-debuginfoUpgrade libdrm-debuginfoUpgrade libglvndUpgrade mesa-libGL-develUpgrade libdrm-develUpgrade mesa-vulkan-driversUpgrade libglvnd-glesUpgrade mesa-libOSMesaUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-glxUpgrade mesa-dri-driversUpgrade mesa-libxatrackerUpgrade mesa-vdpau-drivers-debuginfoUpgrade libwacom-develUpgrade xorg-x11-server-debuginfoUpgrade libwacomUpgrade libglvnd-core-develUpgrade mesa-libgbm-develUpgrade egl-waylandUpgrade libX11-xcb-debuginfoUpgrade mesa-libGLUpgrade mesa-libOSMesa-debuginfoUpgrade libwacom-debugsourceUpgrade libinputUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libOSMesa-develUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libgbmUpgrade xorg-x11-server-XvfbUpgrade libinput-devel | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade mesa-libEGLUpgrade mesa-libgbm-debuginfoUpgrade mesa-libOSMesa-develUpgrade libglvnd-glx-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-libglapiUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-libGL-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinput-develUpgrade libglvnd-eglUpgrade libinputUpgrade mesa-debugsourceUpgrade libX11-develUpgrade libX11-debugsourceUpgrade mesa-libGLUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libwacom-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libinput-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-debuginfoUpgrade libX11-xcbUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libEGL-develUpgrade libglvnd-debugsourceUpgrade libglvnd-opengl-debuginfoUpgrade libinput-utils-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libgbmUpgrade libwacomUpgrade libglvnd-gles-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-commonUpgrade egl-wayland-debugsourceUpgrade egl-waylandUpgrade egl-wayland-debuginfoUpgrade libglvnd-develUpgrade libglvnd-glesUpgrade mesa-vulkan-develUpgrade libinput-utilsUpgrade xorg-x11-server-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvndUpgrade libwacom-develUpgrade libX11-xcb-debuginfoUpgrade libdrm-develUpgrade libdrmUpgrade mesa-filesystemUpgrade libglvnd-openglUpgrade mesa-debuginfoUpgrade libinput-debugsourceUpgrade mesa-libOSMesaUpgrade libglvnd-glxUpgrade libdrm-debuginfoUpgrade mesa-dri-driversUpgrade mesa-vulkan-driversUpgrade mesa-libgbm-develUpgrade libX11-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libX11Upgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-driversUpgrade libglvnd-core-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debugsource | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-source | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub