A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-develUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-develUpgrade libglvnd-eglUpgrade libinput-develUpgrade mesa-libgbm-develUpgrade libglvnd-glesUpgrade xorg-x11-server-sourceUpgrade xorg-x11-driversUpgrade libwacom-develUpgrade libglvnd-glxUpgrade libglvnd-core-develUpgrade libglvnd-openglUpgrade libglvnd | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-devel | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade mesa-vulkan-driversUpgrade xorg-x11-server-commonUpgrade drm-utils-debuginfoUpgrade libwacom-dataUpgrade libX11-xcb-debuginfoUpgrade mesa-vulkan-develUpgrade libdrmUpgrade xorg-x11-server-develUpgrade mesa-libGLUpgrade xorg-x11-server-XephyrUpgrade mesa-libOSMesaUpgrade libglvnd-glxUpgrade libdrm-develUpgrade libX11Upgrade libwacom-debugsourceUpgrade libwacomUpgrade libX11-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libwacom-debuginfoUpgrade libX11-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-debugsourceUpgrade mesa-filesystemUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-eglUpgrade libinput-debugsourceUpgrade mesa-libEGLUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XdmxUpgrade mesa-libglapiUpgrade xorg-x11-server-debugsourceUpgrade mesa-debuginfoUpgrade mesa-libEGL-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libxatrackerUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-sourceUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-driversUpgrade mesa-libgbm-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-vdpau-drivers-debuginfoUpgrade libinputUpgrade mesa-libgbmUpgrade libglvnd-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-server-XnestUpgrade libX11-xcbUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-develUpgrade libinput-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-dri-driversUpgrade libX11-commonUpgrade libglvndUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libGL-develUpgrade libglvnd-openglUpgrade libX11-develUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade libglvnd-debugsourceUpgrade egl-waylandUpgrade libinput-utilsUpgrade mesa-libGL-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-dmxUpgrade xephyrUpgrade xorg-nestserverUpgrade xorg-serverUpgrade xorg-vfbserverUpgrade xwayland | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade xorg-x11-server-XdmxUpgrade libdrmUpgrade mesa-libgbm-develUpgrade libglvnd-glxUpgrade libglvndUpgrade mesa-vulkan-develUpgrade mesa-libOSMesaUpgrade libX11Upgrade xorg-x11-driversUpgrade libdrm-develUpgrade mesa-vulkan-driversUpgrade libglvnd-openglUpgrade mesa-libglapiUpgrade libinput-utilsUpgrade xorg-x11-server-XorgUpgrade libglvnd-develUpgrade mesa-libEGL-develUpgrade mesa-libGLUpgrade libglvnd-core-develUpgrade xorg-x11-server-develUpgrade libX11-xcbUpgrade libwacomUpgrade mesa-libEGLUpgrade libglvnd-eglUpgrade egl-waylandUpgrade mesa-libgbmUpgrade xorg-x11-server-sourceUpgrade mesa-libOSMesa-develUpgrade libX11-develUpgrade libwacom-dataUpgrade xorg-x11-server-XvfbUpgrade libinput-develUpgrade mesa-libxatrackerUpgrade mesa-libGL-develUpgrade mesa-vdpau-driversUpgrade libwacom-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade libinputUpgrade mesa-dri-driversUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade libX11-commonUpgrade libglvnd-glesUpgrade mesa-filesystem | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-filesystemUpgrade libglvnd-glesUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libgbm-develUpgrade mesa-libGL-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade egl-wayland-debugsourceUpgrade libdrm-debuginfoUpgrade libglvnd-eglUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-utilsUpgrade libwacom-develUpgrade libglvnd-glxUpgrade libdrmUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-develUpgrade egl-waylandUpgrade xorg-x11-server-debugsourceUpgrade mesa-vulkan-driversUpgrade mesa-dri-driversUpgrade mesa-vdpau-driversUpgrade xorg-x11-driversUpgrade libinput-debugsourceUpgrade libX11-xcb-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libOSMesaUpgrade xorg-x11-server-XorgUpgrade libX11-debuginfoUpgrade libdrm-develUpgrade mesa-vulkan-develUpgrade libwacomUpgrade xorg-x11-server-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libX11-develUpgrade libglvndUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-openglUpgrade egl-wayland-debuginfoUpgrade libX11Upgrade mesa-libGLUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade mesa-libEGLUpgrade libX11-debugsourceUpgrade libglvnd-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-commonUpgrade mesa-libEGL-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-develUpgrade libinputUpgrade mesa-libEGL-develUpgrade mesa-debugsourceUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-sourceUpgrade libX11-commonUpgrade mesa-libxatrackerUpgrade libwacom-debuginfoUpgrade mesa-libglapiNo solution existsUpgrade libwacom-debugsourceUpgrade libinput-test-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libgbmUpgrade libX11-xcbUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-XnestUpgrade libinput-develUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libwacom-dataUpgrade xorg-x11-server-Xvfb | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade xorg-x11-driversUpgrade libglvndUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-debuginfoUpgrade mesa-libgbm-develUpgrade mesa-libOSMesaUpgrade libdrm-develUpgrade mesa-vulkan-driversUpgrade mesa-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade egl-waylandUpgrade libX11Upgrade xorg-x11-server-debugsourceUpgrade mesa-vulkan-develUpgrade xorg-x11-server-debuginfoUpgrade mesa-filesystemUpgrade mesa-libGL-debuginfoUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade libwacom-develUpgrade libglvnd-develUpgrade mesa-dri-driversUpgrade xorg-x11-server-XorgUpgrade libdrm-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libinput-utilsUpgrade egl-wayland-debuginfoUpgrade libglvnd-glxUpgrade xorg-x11-server-XwaylandUpgrade libdrmUpgrade libX11-xcb-debuginfoUpgrade libglvnd-openglUpgrade libinput-debugsourceUpgrade mesa-libEGLUpgrade libwacom-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-libgbmUpgrade mesa-vdpau-driversUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-XdmxUpgrade mesa-libxatracker-debuginfoUpgrade libX11-xcbUpgrade libinput-develUpgrade libinputUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libGL-develUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libEGL-develUpgrade libwacom-debugsourceUpgrade libglvnd-opengl-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XnestUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-XephyrUpgrade mesa-libxatrackerUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-commonUpgrade mesa-libglapi-debuginfoUpgrade libinput-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-develUpgrade libX11-develUpgrade libX11-debugsourceUpgrade mesa-libGLUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-eglUpgrade libwacomUpgrade libglvnd-glx-debuginfoUpgrade mesa-libOSMesa-develUpgrade mesa-libgbm-debuginfoUpgrade mesa-libEGL-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-wayland | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro) | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub