A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-core-develUpgrade mesa-libgbm-develUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade libglvndUpgrade libglvnd-glxUpgrade xorg-x11-driversUpgrade libglvnd-glesUpgrade libwacom-develUpgrade xorg-x11-server-sourceUpgrade libglvnd-eglUpgrade libinput-develUpgrade xorg-x11-server-develUpgrade mesa-libOSMesa-devel | May 4, 2022 | Aug 5, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Aug 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland | Jan 27, 2021 | Aug 5, 2020 |
| Centos_linux | — | Upgrade libdrm-debugsourceUpgrade mesa-debuginfoUpgrade libX11-commonUpgrade mesa-libglapiUpgrade libwacom-debuginfoUpgrade libinput-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libGLUpgrade xorg-x11-server-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libinput-utilsUpgrade xorg-x11-server-XdmxUpgrade mesa-libGL-debuginfoUpgrade libdrmUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libGL-develUpgrade libglvnd-debugsourceUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libEGLUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libdrm-debuginfoUpgrade libglvnd-develUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-gles-debuginfoUpgrade libinput-debugsourceUpgrade libdrm-develUpgrade libglvnd-eglUpgrade mesa-libEGL-develUpgrade mesa-libgbmUpgrade mesa-libOSMesaUpgrade egl-wayland-debugsourceUpgrade libglvnd-openglUpgrade mesa-libxatracker-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-driversUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-develUpgrade libX11-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libglapi-debuginfoUpgrade mesa-debugsourceUpgrade libwacomUpgrade mesa-vulkan-driversUpgrade libglvnd-glxUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade mesa-libOSMesa-debuginfoUpgrade libX11-xcbUpgrade libglvnd-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacom-dataUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-sourceUpgrade mesa-filesystemUpgrade mesa-dri-drivers-debuginfoUpgrade libglvndUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-dri-driversUpgrade egl-waylandUpgrade libX11-debugsourceUpgrade libX11Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade libinputUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-vdpau-driversUpgrade libX11-develUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-egl-debuginfo | Dec 15, 2020 | Aug 5, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Aug 5, 2020 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-dmxUpgrade xephyrUpgrade xorg-vfbserverUpgrade xorg-serverUpgrade xorg-nestserver | Aug 2, 2020 | Aug 1, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Feb 22, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Dec 15, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Aug 5, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/header/x11-protocols to version 7.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Aug 5, 2020 |
| Oracle_linux | — | Upgrade mesa-libEGL-develUpgrade mesa-vulkan-develUpgrade libdrmUpgrade libdrm-develUpgrade mesa-libgbmUpgrade xorg-x11-server-XdmxUpgrade libX11Upgrade mesa-libEGLUpgrade mesa-vulkan-driversUpgrade mesa-libgbm-develUpgrade libglvnd-glxUpgrade libinput-utilsUpgrade mesa-libGL-develUpgrade xorg-x11-server-XnestUpgrade mesa-libOSMesa-develUpgrade mesa-libGLUpgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade xorg-x11-server-develUpgrade libglvnd-develUpgrade mesa-libglapiUpgrade mesa-libOSMesaUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade libwacom-develUpgrade libglvndUpgrade libX11-develUpgrade mesa-vdpau-driversUpgrade libglvnd-eglUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XwaylandUpgrade libinput-develUpgrade libinputUpgrade libglvnd-openglUpgrade libX11-commonUpgrade xorg-x11-driversUpgrade libwacom-dataUpgrade egl-waylandUpgrade libX11-xcbUpgrade libwacomUpgrade mesa-filesystemUpgrade mesa-dri-driversUpgrade xorg-x11-server-common | Dec 15, 2020 | Jul 31, 2020 |
| Redhat_linux | — | Upgrade mesa-vulkan-driversUpgrade libglvnd-eglUpgrade libinput-debugsourceUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-glxUpgrade xorg-x11-server-develUpgrade mesa-filesystemUpgrade libdrm-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-debuginfoUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libEGLUpgrade xorg-x11-server-XephyrUpgrade libglvnd-openglUpgrade libX11-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libdrmUpgrade mesa-vulkan-develUpgrade libwacom-dataUpgrade mesa-libOSMesaUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libwacomUpgrade libX11Upgrade xorg-x11-server-XdmxUpgrade libdrm-develUpgrade libinput-test-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade egl-wayland-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XorgUpgrade libwacom-develUpgrade libwacom-debugsourceUpgrade xorg-x11-driversUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libEGL-develUpgrade libinput-utils-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libGLUpgrade xorg-x11-server-debuginfoUpgrade mesa-libgbm-develUpgrade mesa-libOSMesa-develUpgrade libglvnd-develUpgrade libglvnd-gles-debuginfoUpgrade libX11-commonUpgrade libglvnd-glesUpgrade egl-wayland-debugsourceUpgrade mesa-vdpau-driversUpgrade mesa-libgbmUpgrade libglvnd-debugsourceUpgrade mesa-libglapiUpgrade mesa-dri-driversUpgrade libX11-develUpgrade libdrm-debugsourceUpgrade libinput-utilsUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xnest-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGL-debuginfoUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libinput-develNo solution existsUpgrade libinputUpgrade mesa-libGL-develUpgrade libX11-xcbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvndUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libX11-debugsourceUpgrade libwacom-debuginfo | Dec 15, 2020 | Aug 5, 2020 |
| Rocky_linux | — | Upgrade mesa-libglapiUpgrade egl-wayland-debugsourceUpgrade libinput-develUpgrade egl-waylandUpgrade libinput-utilsUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-debugsourceUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XvfbUpgrade mesa-libGL-develUpgrade libdrmUpgrade mesa-dri-driversUpgrade libdrm-debuginfoUpgrade mesa-libOSMesa-develUpgrade libinput-debuginfoUpgrade xorg-x11-server-XorgUpgrade libglvnd-debugsourceUpgrade mesa-libgbm-develUpgrade mesa-libGL-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libglvndUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libinput-utils-debuginfoUpgrade libglvnd-glesUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libinputUpgrade xorg-x11-driversUpgrade libX11-develUpgrade mesa-libgbm-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade egl-wayland-debuginfoUpgrade mesa-vdpau-driversUpgrade mesa-libgbmUpgrade mesa-vulkan-drivers-debuginfoUpgrade libdrm-develUpgrade mesa-libOSMesaUpgrade libwacomUpgrade mesa-filesystemUpgrade libwacom-debugsourceUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-glxUpgrade libglvnd-develUpgrade libwacom-debuginfoUpgrade libX11-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-eglUpgrade libglvnd-openglUpgrade libwacom-develUpgrade libglvnd-egl-debuginfoUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-debuginfoUpgrade mesa-vulkan-driversUpgrade mesa-libEGL-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libGLUpgrade libX11-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade libinput-debugsourceUpgrade libX11Upgrade mesa-libEGLUpgrade libX11-xcbUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade mesa-vulkan-develUpgrade libdrm-debugsourceUpgrade xorg-x11-server-Xnest-debuginfo | Mar 12, 2024 | Aug 5, 2020 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-waylandUpgrade xorg-x11-XvncUpgrade xorg-x11-server-extra | Aug 27, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core-hwe-18.04 | Sep 3, 2020 | Jul 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub