A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwacom-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-driversUpgrade libglvndUpgrade libglvnd-core-develUpgrade libglvnd-glxUpgrade libglvnd-openglUpgrade libglvnd-eglUpgrade libglvnd-develUpgrade xorg-x11-server-develUpgrade libinput-develUpgrade libglvnd-glesUpgrade mesa-libgbm-develUpgrade mesa-libOSMesa-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfo | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libinput-utilsUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libinputUpgrade mesa-libgbmUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libGL-develUpgrade libdrm-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libX11-xcbUpgrade libglvnd-opengl-debuginfoUpgrade libX11-develUpgrade libglvnd-develUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade egl-waylandUpgrade egl-wayland-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libinput-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-dri-driversUpgrade libinput-utils-debuginfoUpgrade libX11-commonUpgrade xorg-x11-server-XvfbUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-glesUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade egl-wayland-debuginfoUpgrade libglvndUpgrade xorg-x11-server-XorgUpgrade libglvnd-glxUpgrade mesa-filesystemUpgrade mesa-libglapi-debuginfoUpgrade mesa-debugsourceUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-develUpgrade mesa-vulkan-develUpgrade libX11-xcb-debuginfoUpgrade libdrmUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-debuginfoUpgrade mesa-debuginfoUpgrade libwacomUpgrade xorg-x11-server-XdmxUpgrade mesa-libEGL-develUpgrade libinput-test-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-libOSMesaUpgrade libX11-debugsourceUpgrade libinput-debugsourceUpgrade libglvnd-eglUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libwacom-dataUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-vdpau-driversUpgrade mesa-libGLUpgrade libwacom-debugsourceUpgrade xorg-x11-server-XephyrUpgrade drm-utils-debuginfoUpgrade libdrm-develUpgrade xorg-x11-server-commonUpgrade mesa-libEGLUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-sourceUpgrade mesa-libglapiUpgrade xorg-x11-server-debuginfoUpgrade libX11 | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xwaylandUpgrade xephyrUpgrade xorg-nestserverUpgrade xorg-serverUpgrade xorg-vfbserverUpgrade xorg-dmx | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade mesa-libGL-develUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XephyrUpgrade egl-waylandUpgrade mesa-libOSMesa-develUpgrade libX11-develUpgrade libinput-develUpgrade libwacom-develUpgrade mesa-vdpau-driversUpgrade libglvnd-glesUpgrade libX11-commonUpgrade libX11-xcbUpgrade mesa-libgbmUpgrade libinputUpgrade mesa-filesystemUpgrade xorg-x11-server-XwaylandUpgrade libwacomUpgrade xorg-x11-server-XnestUpgrade libglvnd-eglUpgrade mesa-dri-driversUpgrade xorg-x11-server-commonUpgrade libwacom-dataUpgrade mesa-libEGLUpgrade xorg-x11-server-sourceUpgrade libX11Upgrade libglvnd-openglUpgrade mesa-libglapiUpgrade mesa-libGLUpgrade xorg-x11-server-XorgUpgrade mesa-libEGL-develUpgrade libglvnd-core-develUpgrade libinput-utilsUpgrade libglvnd-develUpgrade mesa-vulkan-driversUpgrade libglvnd-glxUpgrade libglvndUpgrade libdrm-develUpgrade mesa-libgbm-develUpgrade libdrmUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XdmxUpgrade mesa-libOSMesaUpgrade xorg-x11-drivers | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-libEGL-develUpgrade mesa-libEGLUpgrade libwacom-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-XnestUpgrade libglvnd-egl-debuginfoUpgrade mesa-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-debugsourceUpgrade libinputUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-debuginfoUpgrade libX11-debugsourceUpgrade xorg-x11-server-develUpgrade libdrm-debugsourceUpgrade mesa-libglapiUpgrade mesa-libxatrackerNo solution existsUpgrade libX11-commonUpgrade mesa-debugsourceUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-sourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade libinput-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libGLUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-XephyrUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libgbmUpgrade libwacom-debuginfoUpgrade libwacom-dataUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade mesa-libOSMesa-develUpgrade libX11-xcbUpgrade egl-waylandUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-core-develUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade libwacom-develUpgrade libX11-debuginfoUpgrade xorg-x11-driversUpgrade libdrm-debuginfoUpgrade mesa-libgbm-develUpgrade libglvnd-openglUpgrade mesa-vulkan-develUpgrade xorg-x11-server-debugsourceUpgrade libglvndUpgrade libX11-develUpgrade mesa-libGL-debuginfoUpgrade libdrm-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XwaylandUpgrade mesa-filesystemUpgrade mesa-libGL-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libdrmUpgrade egl-wayland-debugsourceUpgrade libinput-debugsourceUpgrade libglvnd-glesUpgrade libglvnd-develUpgrade libglvnd-glxUpgrade drm-utils-debuginfoUpgrade libwacomUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade egl-wayland-debuginfoUpgrade mesa-dri-driversUpgrade libglvnd-eglUpgrade mesa-libOSMesaUpgrade libX11Upgrade libinput-utilsUpgrade libinput-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libgbmUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libEGLUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libwacomUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-eglUpgrade libglvnd-debugsourceUpgrade mesa-debugsourceUpgrade mesa-libGL-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-libglapiUpgrade mesa-libGLUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-develUpgrade libX11-debugsourceUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XdmxUpgrade libX11-develUpgrade mesa-vdpau-driversUpgrade libglvnd-opengl-debuginfoUpgrade libwacom-debuginfoUpgrade libwacom-debugsourceUpgrade libinput-utils-debuginfoUpgrade mesa-libEGL-develUpgrade libinput-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libX11-xcbUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinputUpgrade xorg-x11-server-commonUpgrade libinput-develUpgrade libglvnd-debuginfoUpgrade mesa-libOSMesa-develUpgrade libdrm-debuginfoUpgrade mesa-dri-driversUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-driversUpgrade libglvndUpgrade mesa-filesystemUpgrade libglvnd-openglUpgrade libinput-debugsourceUpgrade libdrmUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libglvnd-glesUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-XorgUpgrade libinput-utilsUpgrade libglvnd-develUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-vulkan-develUpgrade egl-waylandUpgrade xorg-x11-server-XwaylandUpgrade libwacom-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-vulkan-driversUpgrade libX11-debuginfoUpgrade mesa-libOSMesaUpgrade mesa-debuginfoUpgrade libglvnd-glxUpgrade mesa-libgbm-develUpgrade libdrm-develUpgrade xorg-x11-server-debuginfoUpgrade libX11Upgrade libglvnd-core-devel | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-wayland | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub