A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-sourceUpgrade libwacom-develUpgrade libglvnd-eglUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-develUpgrade libinput-develUpgrade libglvndUpgrade libglvnd-glesUpgrade mesa-libgbm-develUpgrade libglvnd-develUpgrade libglvnd-glxUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade libglvnd-core-devel | May 4, 2022 | Aug 5, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Aug 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland | Jan 27, 2021 | Aug 5, 2020 |
| Centos_linux | — | Upgrade xorg-x11-server-XnestUpgrade egl-wayland-debuginfoUpgrade libinputUpgrade libinput-test-debuginfoUpgrade mesa-vulkan-driversUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libwacom-dataUpgrade libX11Upgrade xorg-x11-server-XorgUpgrade libX11-debugsourceUpgrade egl-waylandUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libxatrackerUpgrade xorg-x11-server-sourceUpgrade libglvnd-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libX11-xcbUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade mesa-filesystemUpgrade mesa-vulkan-develUpgrade mesa-dri-driversUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libwacomUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-glxUpgrade mesa-vdpau-driversUpgrade mesa-debugsourceUpgrade xorg-x11-server-XvfbUpgrade libX11-develUpgrade mesa-libglapi-debuginfoUpgrade libglvndUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libinput-utilsUpgrade mesa-debuginfoUpgrade libX11-commonUpgrade libwacom-debuginfoUpgrade mesa-libGL-develUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libGLUpgrade libdrm-debugsourceUpgrade libglvnd-openglUpgrade egl-wayland-debugsourceUpgrade libdrm-develUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-driversUpgrade mesa-libEGL-develUpgrade mesa-libOSMesaUpgrade libinput-debuginfoUpgrade libinput-utils-debuginfoUpgrade libinput-debugsourceUpgrade libdrm-debuginfoUpgrade drm-utils-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-develUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-eglUpgrade mesa-libgbmUpgrade libdrmUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-libEGLUpgrade libglvnd-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libglapiUpgrade libglvnd-core-develUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-glesUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfo | Dec 15, 2020 | Aug 5, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Aug 5, 2020 |
| Freebsd | — | Upgrade xephyrUpgrade xorg-vfbserverUpgrade xorg-dmxUpgrade xwaylandUpgrade xorg-serverUpgrade xorg-nestserver | Aug 2, 2020 | Aug 1, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Feb 22, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Dec 15, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Aug 5, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/header/x11-protocols to version 7.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Aug 5, 2020 |
| Oracle_linux | — | Upgrade mesa-libOSMesa-develUpgrade mesa-libOSMesaUpgrade mesa-libGL-develUpgrade xorg-x11-server-XnestUpgrade mesa-libGLUpgrade mesa-libgbm-develUpgrade libglvnd-glxUpgrade libX11Upgrade mesa-libglapiUpgrade mesa-libgbmUpgrade mesa-libEGLUpgrade mesa-vulkan-driversUpgrade libinput-utilsUpgrade libglvnd-develUpgrade mesa-vulkan-develUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade mesa-libEGL-develUpgrade libglvnd-glesUpgrade xorg-x11-server-XdmxUpgrade libdrmUpgrade xorg-x11-server-develUpgrade libinput-develUpgrade libX11-commonUpgrade libglvnd-openglUpgrade mesa-vdpau-driversUpgrade libX11-develUpgrade libglvndUpgrade libinputUpgrade mesa-dri-driversUpgrade xorg-x11-server-commonUpgrade mesa-filesystemUpgrade xorg-x11-server-XvfbUpgrade libglvnd-eglUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade libwacom-develUpgrade libwacomUpgrade egl-waylandUpgrade libX11-xcbUpgrade xorg-x11-driversUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XephyrUpgrade libwacom-dataUpgrade xorg-x11-server-Xwayland | Dec 15, 2020 | Jul 31, 2020 |
| Redhat_linux | — | Upgrade mesa-dri-driversUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XnestUpgrade libinputUpgrade mesa-libgbm-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libX11-xcbUpgrade mesa-libGLUpgrade libinput-utils-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libX11-develUpgrade libglvndUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-core-develUpgrade mesa-libgbmUpgrade libinput-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-driversUpgrade libglvnd-gles-debuginfoUpgrade libX11-commonUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-utilsUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade egl-wayland-debugsourceUpgrade libwacom-debuginfoNo solution existsUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libinput-develUpgrade libglvnd-develUpgrade mesa-libGL-debuginfoUpgrade mesa-libGL-develUpgrade libdrm-debugsourceUpgrade libX11-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-glesUpgrade mesa-libOSMesa-develUpgrade libdrm-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libgbm-develUpgrade xorg-x11-server-develUpgrade libdrmUpgrade mesa-vulkan-driversUpgrade libinput-debugsourceUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-sourceUpgrade libglvnd-egl-debuginfoUpgrade libX11-debuginfoUpgrade mesa-debuginfoUpgrade libglvnd-eglUpgrade mesa-libxatrackerUpgrade libwacom-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade mesa-vulkan-develUpgrade libglvnd-openglUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade egl-wayland-debuginfoUpgrade libinput-test-debuginfoUpgrade libX11Upgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libdrm-develUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-glxUpgrade mesa-libEGLUpgrade mesa-debugsourceUpgrade libwacom-develUpgrade libX11-xcb-debuginfoUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-XephyrUpgrade libwacom-dataUpgrade mesa-libOSMesaUpgrade mesa-filesystemUpgrade libwacomUpgrade mesa-libEGL-debuginfoUpgrade mesa-vdpau-drivers | Dec 15, 2020 | Aug 5, 2020 |
| Rocky_linux | — | Upgrade libglvnd-develUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libgbmUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-eglUpgrade libglvnd-egl-debuginfoUpgrade libwacom-develUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-debuginfoUpgrade libwacom-debugsourceUpgrade xorg-x11-server-XdmxUpgrade mesa-filesystemUpgrade libdrm-develUpgrade libdrm-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-vdpau-driversUpgrade libwacomUpgrade mesa-vulkan-develUpgrade xorg-x11-server-develUpgrade mesa-libGLUpgrade mesa-libOSMesaUpgrade xorg-x11-server-commonUpgrade mesa-libEGL-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libEGLUpgrade libX11Upgrade mesa-libEGL-debuginfoUpgrade mesa-debuginfoUpgrade libX11-debuginfoUpgrade libglvnd-openglUpgrade libinput-debugsourceUpgrade libX11-xcbUpgrade libglvnd-glxUpgrade mesa-vulkan-driversUpgrade libwacom-debuginfoUpgrade xorg-x11-server-XephyrUpgrade libX11-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XorgUpgrade libglvndUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-driversUpgrade mesa-libOSMesa-develUpgrade mesa-libxatrackerUpgrade libinput-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade mesa-dri-driversUpgrade libinput-develUpgrade egl-wayland-debuginfoUpgrade mesa-libGL-debuginfoUpgrade mesa-libgbm-develUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libinput-utilsUpgrade egl-waylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-debugsourceUpgrade libdrmUpgrade mesa-libGL-develUpgrade mesa-debugsourceUpgrade libX11-develUpgrade libglvnd-glesUpgrade libinputUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libglapiUpgrade libdrm-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-core-devel | Mar 12, 2024 | Aug 5, 2020 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-XvncUpgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-extra | Aug 27, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core | Sep 3, 2020 | Jul 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub