A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-sourceUpgrade libglvndUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade libglvnd-glxUpgrade libwacom-develUpgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade mesa-libgbm-develUpgrade libinput-develUpgrade libglvnd-eglUpgrade xorg-x11-server-develUpgrade libglvnd-develUpgrade mesa-libOSMesa-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-sourceUpgrade libwacom-debuginfoUpgrade libdrmUpgrade libinput-debugsourceUpgrade mesa-libOSMesaUpgrade mesa-libglapiUpgrade libX11-debugsourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-filesystemUpgrade xorg-x11-server-commonUpgrade libglvnd-glxUpgrade libX11-xcb-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-vulkan-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-libEGLUpgrade mesa-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade libX11Upgrade mesa-libglapi-debuginfoUpgrade mesa-libxatrackerUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-eglUpgrade xorg-x11-server-XephyrUpgrade mesa-libGLUpgrade libwacom-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libwacom-dataUpgrade mesa-vdpau-driversUpgrade mesa-debuginfoUpgrade libdrm-develUpgrade libinput-test-debuginfoUpgrade mesa-vulkan-driversUpgrade libwacomUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-debuginfoUpgrade drm-utils-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade libdrm-debugsourceUpgrade libdrm-debuginfoUpgrade mesa-libGL-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libinput-utilsUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-dri-driversUpgrade libglvndUpgrade libglvnd-glesUpgrade xorg-x11-server-XnestUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-debugsourceUpgrade egl-wayland-debuginfoUpgrade libglvnd-core-develUpgrade libX11-develUpgrade libX11-commonUpgrade libX11-xcbUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-develUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-debuginfoUpgrade libinputUpgrade mesa-libgbmUpgrade egl-wayland-debugsourceUpgrade egl-waylandUpgrade xorg-x11-server-Xvfb | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-dmxUpgrade xorg-serverUpgrade xephyrUpgrade xorg-nestserverUpgrade xorg-vfbserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libX11-xcbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade libwacom-dataUpgrade libX11-commonUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade mesa-dri-driversUpgrade libinputUpgrade mesa-libEGLUpgrade libglvnd-glesUpgrade mesa-libgbmUpgrade mesa-filesystemUpgrade libwacomUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade libinput-develUpgrade libglvnd-eglUpgrade libwacom-develUpgrade libX11-develUpgrade mesa-vdpau-driversUpgrade egl-waylandUpgrade xorg-x11-server-XvfbUpgrade mesa-libGL-develUpgrade mesa-libxatrackerUpgrade libdrm-develUpgrade mesa-vulkan-driversUpgrade xorg-x11-driversUpgrade mesa-libOSMesaUpgrade mesa-libgbm-develUpgrade xorg-x11-server-XdmxUpgrade libglvnd-develUpgrade mesa-libGLUpgrade mesa-libEGL-develUpgrade libinput-utilsUpgrade xorg-x11-server-XorgUpgrade libglvnd-core-develUpgrade libglvnd-openglUpgrade libglvnd-glxUpgrade mesa-vulkan-develUpgrade libdrmUpgrade libglvndUpgrade libX11Upgrade mesa-libglapi | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-libglapiUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XvfbNo solution existsUpgrade libwacom-dataUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade mesa-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libOSMesa-develUpgrade mesa-libxatrackerUpgrade libglvnd-opengl-debuginfoUpgrade libinput-test-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-debuginfoUpgrade libinputUpgrade xorg-x11-server-commonUpgrade libinput-utils-debuginfoUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libgbmUpgrade xorg-x11-server-XdmxUpgrade libinput-develUpgrade xorg-x11-server-sourceUpgrade mesa-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-libEGLUpgrade mesa-libEGL-debuginfoUpgrade libX11-xcbUpgrade libwacom-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libGLUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-eglUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libgbm-develUpgrade egl-wayland-debugsourceUpgrade libdrm-debuginfoUpgrade mesa-libOSMesaUpgrade egl-wayland-debuginfoUpgrade egl-waylandUpgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade libglvnd-openglUpgrade libinput-utilsUpgrade libglvndUpgrade libX11-xcb-debuginfoUpgrade libX11-debuginfoUpgrade libdrm-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade mesa-vulkan-develUpgrade libinput-debugsourceUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-dri-driversUpgrade xorg-x11-server-XorgUpgrade libinput-debuginfoUpgrade mesa-libGL-develUpgrade libX11Upgrade mesa-filesystemUpgrade xorg-x11-server-debuginfoUpgrade libwacomUpgrade libwacom-develUpgrade drm-utils-debuginfoUpgrade mesa-vulkan-driversUpgrade libdrmUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libX11-develUpgrade xorg-x11-driversUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-develUpgrade libglvnd-glx | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade xorg-x11-server-XephyrUpgrade mesa-libGLUpgrade mesa-libEGL-debuginfoUpgrade libinput-utils-debuginfoUpgrade libwacom-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libgbmUpgrade libglvnd-gles-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-libglapiUpgrade mesa-libxatrackerUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade libX11-debugsourceUpgrade libX11-develUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-vdpau-driversUpgrade libglvnd-debugsourceUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-eglUpgrade mesa-libGL-develUpgrade mesa-debugsourceUpgrade libglvnd-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-vulkan-drivers-debuginfoUpgrade libX11-xcbUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinput-develUpgrade libinput-debuginfoUpgrade libwacom-debugsourceUpgrade libinputUpgrade egl-wayland-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libwacomUpgrade mesa-libEGLUpgrade mesa-libgbm-debuginfoUpgrade mesa-libOSMesa-develUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-dri-driversUpgrade libwacom-develUpgrade libglvndUpgrade libglvnd-develUpgrade egl-waylandUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-driversUpgrade libglvnd-glesUpgrade mesa-libGL-debuginfoUpgrade libdrm-debuginfoUpgrade libX11Upgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-libgbm-develUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-debuginfoUpgrade mesa-vulkan-driversUpgrade mesa-filesystemUpgrade libinput-debugsourceUpgrade libglvnd-openglUpgrade libdrmUpgrade mesa-debuginfoUpgrade mesa-libOSMesaUpgrade libglvnd-glxUpgrade libdrm-develUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-XorgUpgrade libinput-utilsUpgrade egl-wayland-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-wayland | Aug 27, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub