A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mesa-libOSMesa-develUpgrade libinput-develUpgrade libglvnd-glesUpgrade xorg-x11-server-develUpgrade mesa-libgbm-develUpgrade libglvnd-eglUpgrade libglvnd-develUpgrade libglvnd-glxUpgrade libglvnd-core-develUpgrade libglvnd-openglUpgrade xorg-x11-server-sourceUpgrade libglvndUpgrade libwacom-develUpgrade xorg-x11-drivers | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-eglUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-filesystemUpgrade libwacom-debuginfoUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XorgUpgrade mesa-vulkan-develUpgrade libdrm-develUpgrade libglvnd-glxUpgrade libwacomUpgrade mesa-debugsourceUpgrade mesa-libglapiUpgrade mesa-libglapi-debuginfoUpgrade libX11Upgrade libinput-test-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-libGLUpgrade mesa-libxatrackerUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libwacom-dataUpgrade libwacom-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libdrmUpgrade mesa-vulkan-driversUpgrade libX11-xcb-debuginfoUpgrade mesa-debuginfoUpgrade libX11-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-libEGLUpgrade libinput-debugsourceUpgrade libX11-debugsourceUpgrade mesa-libEGL-develUpgrade mesa-libOSMesaUpgrade xorg-x11-server-commonUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libGL-develUpgrade libinput-utilsUpgrade libX11-xcbUpgrade xorg-x11-server-XwaylandUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinputUpgrade libglvnd-debugsourceUpgrade mesa-libGL-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-driversUpgrade libdrm-debugsourceUpgrade libglvnd-openglUpgrade mesa-dri-driversUpgrade libX11-commonUpgrade libinput-utils-debuginfoUpgrade libglvndUpgrade egl-wayland-debuginfoUpgrade egl-wayland-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libgbmUpgrade xorg-x11-server-XnestUpgrade libX11-develUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade libglvnd-develUpgrade mesa-libOSMesa-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-dmxUpgrade xephyrUpgrade xorg-vfbserverUpgrade xorg-serverUpgrade xorg-nestserverUpgrade xwayland | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libwacomUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade libglvnd-eglUpgrade libwacom-develUpgrade mesa-libGL-develUpgrade mesa-libxatrackerUpgrade libinputUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-develUpgrade egl-waylandUpgrade mesa-libgbmUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade mesa-libEGLUpgrade xorg-x11-server-XwaylandUpgrade libX11-xcbUpgrade mesa-dri-driversUpgrade mesa-filesystemUpgrade libwacom-dataUpgrade xorg-x11-server-commonUpgrade libglvnd-glesUpgrade libX11-commonUpgrade mesa-libOSMesa-develUpgrade libX11-develUpgrade libinput-develUpgrade mesa-libEGL-develUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade mesa-libglapiUpgrade libX11Upgrade xorg-x11-driversUpgrade libglvndUpgrade mesa-libgbm-develUpgrade libdrmUpgrade mesa-vulkan-driversUpgrade libglvnd-develUpgrade mesa-libOSMesaUpgrade xorg-x11-server-XorgUpgrade mesa-libGLUpgrade libglvnd-glxUpgrade libinput-utilsUpgrade libglvnd-openglUpgrade xorg-x11-server-XdmxUpgrade mesa-vulkan-devel | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-libgbmUpgrade mesa-debuginfoUpgrade libX11-xcbUpgrade libglvnd-glx-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libinputUpgrade mesa-libEGL-debuginfoUpgrade mesa-libGLUpgrade libinput-utils-debuginfoUpgrade mesa-libEGLUpgrade xorg-x11-server-XdmxUpgrade libinput-develUpgrade mesa-libOSMesa-develUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-sourceUpgrade mesa-libglapi-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libwacom-dataUpgrade xorg-x11-server-XvfbUpgrade mesa-libglapiUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinput-test-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-debugsourceUpgrade xorg-x11-server-develUpgrade mesa-debugsourceUpgrade xorg-x11-server-XephyrNo solution existsUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XnestUpgrade libglvnd-debugsourceUpgrade libX11-commonUpgrade mesa-libEGL-develUpgrade libwacom-debugsourceUpgrade libglvnd-opengl-debuginfoUpgrade libdrm-debugsourceUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-eglUpgrade mesa-dri-driversUpgrade libinput-debuginfoUpgrade xorg-x11-server-XorgUpgrade egl-wayland-debuginfoUpgrade mesa-libOSMesaUpgrade libdrm-debuginfoUpgrade libinput-utilsUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-libGL-debuginfoUpgrade mesa-filesystemUpgrade libdrmUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-develUpgrade mesa-libgbm-develUpgrade drm-utils-debuginfoUpgrade libglvnd-glxUpgrade libwacom-develUpgrade libX11-develUpgrade mesa-vulkan-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-openglUpgrade egl-wayland-debugsourceUpgrade libinput-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade libX11Upgrade libglvnd-core-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-vulkan-driversUpgrade libglvnd-glesUpgrade libX11-debuginfoUpgrade libdrm-develUpgrade libglvndUpgrade mesa-vdpau-driversUpgrade egl-waylandUpgrade mesa-libGL-develUpgrade xorg-x11-driversUpgrade libwacom | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade mesa-debugsourceUpgrade xorg-x11-server-commonUpgrade libglvnd-egl-debuginfoUpgrade mesa-libxatrackerUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libEGL-develUpgrade mesa-libGLUpgrade libX11-debugsourceUpgrade libX11-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade mesa-libOSMesa-develUpgrade libglvnd-glx-debuginfoUpgrade libwacomUpgrade mesa-libEGLUpgrade mesa-libglapiUpgrade libglvnd-opengl-debuginfoUpgrade libwacom-debuginfoUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-vdpau-driversUpgrade mesa-libgbm-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-debugsourceUpgrade libglvnd-eglUpgrade xorg-x11-server-develUpgrade libdrm-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libgbmUpgrade libinputUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libinput-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libGL-develUpgrade egl-wayland-debugsourceUpgrade libinput-develUpgrade mesa-libxatracker-debuginfoUpgrade libX11-xcbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-dri-driversUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-develUpgrade libglvnd-core-develUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-debuginfoUpgrade mesa-libgbm-develUpgrade libinput-utilsUpgrade libglvnd-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade egl-wayland-debuginfoUpgrade mesa-vulkan-driversUpgrade libdrm-debuginfoUpgrade libdrmUpgrade libdrm-develUpgrade libglvnd-glxUpgrade mesa-libOSMesaUpgrade mesa-filesystemUpgrade mesa-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvnd-glesUpgrade libinput-debugsourceUpgrade libglvnd-openglUpgrade libglvndUpgrade egl-waylandUpgrade libX11-xcb-debuginfoUpgrade libX11Upgrade libwacom-develUpgrade xorg-x11-driversUpgrade xorg-x11-server-XwaylandUpgrade mesa-dri-drivers-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-server-extra | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-coreUpgrade xserver-xorg-core (Ubuntu Pro) | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub