A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mesa-libgbm-develUpgrade xorg-x11-server-develUpgrade mesa-libOSMesa-develUpgrade libinput-develUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade libglvnd-develUpgrade libglvnd-core-develUpgrade libglvndUpgrade xorg-x11-server-sourceUpgrade libglvnd-glxUpgrade libglvnd-openglUpgrade libwacom-develUpgrade xorg-x11-drivers | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xvfb | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade mesa-libGL-develUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-libgbmUpgrade mesa-libgbm-debuginfoUpgrade libinput-utilsUpgrade mesa-libGL-debuginfoUpgrade libdrm-debuginfoUpgrade libinputUpgrade xorg-x11-server-XvfbUpgrade libinput-utils-debuginfoUpgrade egl-wayland-debuginfoUpgrade libglvndUpgrade mesa-dri-driversUpgrade libdrm-debugsourceUpgrade libX11-commonUpgrade libglvnd-openglUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-driversUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade egl-wayland-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-glesUpgrade libX11-xcbUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-develUpgrade libX11-develUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-debugsourceUpgrade libglvnd-core-develUpgrade egl-waylandUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade mesa-libglapiUpgrade libglvnd-glx-debuginfoUpgrade mesa-filesystemUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-XorgUpgrade libX11Upgrade mesa-libglapi-debuginfoUpgrade mesa-libGLUpgrade libwacom-debugsourceUpgrade libwacom-dataUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-sourceUpgrade libX11-debuginfoUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-commonUpgrade mesa-libOSMesaUpgrade libinput-debugsourceUpgrade libX11-debugsourceUpgrade libwacom-debuginfoUpgrade mesa-vulkan-develUpgrade libdrmUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade libglvnd-glxUpgrade libdrm-develUpgrade xorg-x11-server-debugsourceUpgrade mesa-vdpau-driversUpgrade libglvnd-egl-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-debuginfoUpgrade libwacomUpgrade xorg-x11-server-XdmxUpgrade mesa-libxatrackerUpgrade libinput-test-debuginfoUpgrade libglvnd-eglUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libEGL | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-serverUpgrade xorg-dmxUpgrade xephyrUpgrade xorg-nestserverUpgrade xorg-vfbserverUpgrade xwayland | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade xorg-x11-server-develUpgrade libinput-develUpgrade libwacom-develUpgrade xorg-x11-server-XephyrUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade libwacom-dataUpgrade mesa-libxatrackerUpgrade mesa-libGL-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade mesa-filesystemUpgrade mesa-dri-driversUpgrade libX11-xcbUpgrade libglvnd-glesUpgrade libglvnd-eglUpgrade mesa-libgbmUpgrade mesa-libEGLUpgrade egl-waylandUpgrade libX11-commonUpgrade libinputUpgrade libwacomUpgrade xorg-x11-server-XvfbUpgrade libX11-develUpgrade mesa-vdpau-driversUpgrade mesa-libGLUpgrade mesa-vulkan-develUpgrade mesa-libEGL-develUpgrade libinput-utilsUpgrade libglvnd-core-develUpgrade mesa-vulkan-driversUpgrade libdrm-develUpgrade libglvnd-develUpgrade xorg-x11-server-XorgUpgrade mesa-libgbm-develUpgrade libdrmUpgrade xorg-x11-server-XdmxUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade mesa-libglapiUpgrade libX11Upgrade libglvndUpgrade libglvnd-glxUpgrade mesa-libOSMesa | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade libdrmUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libOSMesaUpgrade mesa-vdpau-driversUpgrade drm-utils-debuginfoUpgrade libglvnd-glxUpgrade libglvnd-eglUpgrade libwacomUpgrade libwacom-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-dri-driversUpgrade libinput-utilsUpgrade libinput-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-filesystemUpgrade mesa-libGL-develUpgrade libX11Upgrade egl-waylandUpgrade libX11-develUpgrade xorg-x11-driversUpgrade egl-wayland-debuginfoUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade libinput-debugsourceUpgrade libglvnd-develUpgrade egl-wayland-debugsourceUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libglvndUpgrade mesa-vulkan-develUpgrade libglvnd-glesUpgrade libX11-debuginfoUpgrade mesa-vulkan-driversUpgrade libglvnd-openglUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libgbm-develUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-libGLUpgrade mesa-vdpau-drivers-debuginfoUpgrade libwacom-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libEGL-develUpgrade libwacom-dataUpgrade mesa-libEGLUpgrade mesa-libxatracker-debuginfoUpgrade mesa-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libX11-xcbUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libgbmUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-XnestUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libglapiUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade mesa-libgbm-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libglapi-debuginfoNo solution existsUpgrade mesa-debugsourceUpgrade libinputUpgrade libinput-utils-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-debuginfoUpgrade libX11-commonUpgrade libglvnd-debugsourceUpgrade libX11-debugsourceUpgrade mesa-libxatracker | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-driversUpgrade egl-waylandUpgrade libglvndUpgrade libwacom-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-dri-driversUpgrade libdrm-debuginfoUpgrade libglvnd-glxUpgrade mesa-debuginfoUpgrade libdrm-develUpgrade libinput-utilsUpgrade mesa-filesystemUpgrade libglvnd-core-develUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-openglUpgrade libinput-debugsourceUpgrade libX11-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libgbm-develUpgrade mesa-libOSMesaUpgrade egl-wayland-debuginfoUpgrade mesa-vulkan-driversUpgrade libdrmUpgrade libX11Upgrade mesa-vulkan-develUpgrade libglvnd-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debugsourceUpgrade mesa-libGL-debuginfoUpgrade libglvnd-glesUpgrade mesa-libglapiUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGLUpgrade mesa-libGLUpgrade libX11-develUpgrade xorg-x11-server-XnestUpgrade mesa-libxatrackerUpgrade libdrm-debugsourceUpgrade xorg-x11-server-develUpgrade libX11-debugsourceUpgrade xorg-x11-server-XvfbUpgrade mesa-libglapi-debuginfoUpgrade libinput-debuginfoUpgrade libglvnd-debuginfoUpgrade libglvnd-eglUpgrade egl-wayland-debugsourceUpgrade libinputUpgrade libX11-xcbUpgrade libinput-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-debugsourceUpgrade libwacomUpgrade libglvnd-glx-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-vdpau-driversUpgrade mesa-libgbmUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libwacom-debugsourceUpgrade libwacom-debuginfoUpgrade libinput-utils-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libEGL-develUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libOSMesa-devel | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-server-extra | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub