A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-develUpgrade libglvnd-glxUpgrade xorg-x11-driversUpgrade libglvnd-core-develUpgrade libglvndUpgrade mesa-libgbm-develUpgrade libglvnd-glesUpgrade libglvnd-openglUpgrade mesa-libOSMesa-develUpgrade libinput-develUpgrade libglvnd-eglUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade libwacom-devel | May 4, 2022 | Aug 5, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Aug 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest | Jan 27, 2021 | Aug 5, 2020 |
| Centos_linux | — | Upgrade libdrmUpgrade libdrm-debugsourceUpgrade libwacom-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-openglUpgrade xorg-x11-server-develUpgrade xorg-x11-driversUpgrade libglvnd-gles-debuginfoUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libEGLUpgrade mesa-libGL-debuginfoUpgrade mesa-libGL-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade libdrm-develUpgrade mesa-libEGL-develUpgrade libinput-utilsUpgrade libglvnd-eglUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-debuginfoUpgrade mesa-libglapiUpgrade libinput-debugsourceUpgrade mesa-libGLUpgrade libglvnd-glesUpgrade mesa-libOSMesaUpgrade mesa-libgbmUpgrade libglvnd-core-develUpgrade libinput-utils-debuginfoUpgrade drm-utils-debuginfoUpgrade libwacom-debuginfoUpgrade libinput-debuginfoUpgrade libX11-commonUpgrade libdrm-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade egl-wayland-debugsourceUpgrade libglvnd-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade mesa-vulkan-driversUpgrade mesa-libEGL-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-filesystemUpgrade mesa-dri-drivers-debuginfoUpgrade libglvndUpgrade mesa-vdpau-driversUpgrade libX11-debuginfoUpgrade libX11-develUpgrade libglvnd-glx-debuginfoUpgrade libX11-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade libglvnd-glxUpgrade libX11-xcbUpgrade egl-waylandUpgrade mesa-libgbm-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-dri-driversUpgrade mesa-libxatrackerUpgrade libglvnd-debuginfoUpgrade egl-wayland-debuginfoUpgrade libinput-test-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-sourceUpgrade libinputUpgrade libwacom-dataUpgrade mesa-vulkan-develUpgrade libX11Upgrade xorg-x11-server-XephyrUpgrade mesa-debugsourceUpgrade libwacom | Dec 15, 2020 | Aug 5, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Aug 5, 2020 |
| Freebsd | — | Upgrade xorg-serverUpgrade xorg-nestserverUpgrade xorg-dmxUpgrade xorg-vfbserverUpgrade xwaylandUpgrade xephyr | Aug 2, 2020 | Aug 1, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Feb 22, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Dec 15, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Aug 5, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/header/x11-protocols to version 7.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Aug 5, 2020 |
| Oracle_linux | — | Upgrade libdrmUpgrade mesa-libEGL-develUpgrade mesa-libGL-develUpgrade xorg-x11-server-XnestUpgrade mesa-vulkan-develUpgrade mesa-libgbm-develUpgrade mesa-libGLUpgrade mesa-libOSMesa-develUpgrade libdrm-develUpgrade xorg-x11-server-develUpgrade libinput-utilsUpgrade libglvnd-glesUpgrade mesa-libglapiUpgrade libglvnd-core-develUpgrade mesa-libEGLUpgrade mesa-libOSMesaUpgrade libglvnd-glxUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XdmxUpgrade libX11Upgrade mesa-libgbmUpgrade libglvnd-develUpgrade libinputUpgrade libglvnd-openglUpgrade xorg-x11-server-XorgUpgrade libwacom-develUpgrade xorg-x11-driversUpgrade mesa-filesystemUpgrade egl-waylandUpgrade xorg-x11-server-XephyrUpgrade mesa-vdpau-driversUpgrade libwacom-dataUpgrade xorg-x11-server-XvfbUpgrade libX11-commonUpgrade xorg-x11-server-XwaylandUpgrade libinput-develUpgrade libglvndUpgrade libX11-xcbUpgrade libglvnd-eglUpgrade mesa-libxatrackerUpgrade mesa-dri-driversUpgrade xorg-x11-server-commonUpgrade libwacomUpgrade libX11-develUpgrade xorg-x11-server-source | Dec 15, 2020 | Jul 31, 2020 |
| Redhat_linux | — | Upgrade libwacom-dataUpgrade libX11-debuginfoUpgrade mesa-filesystemUpgrade mesa-libxatrackerUpgrade libwacom-develUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libdrmUpgrade libglvnd-eglUpgrade mesa-vdpau-driversUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-develUpgrade libwacom-debugsourceUpgrade xorg-x11-server-XorgUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-glxUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-glesUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libEGLUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libinput-develUpgrade mesa-libEGL-develUpgrade mesa-libOSMesa-develUpgrade mesa-libgbmUpgrade mesa-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libX11-debugsourceUpgrade libwacom-debuginfoUpgrade xorg-x11-driversUpgrade libglvnd-develUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libGLUpgrade egl-wayland-debugsourceUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-debuginfoUpgrade libglvnd-core-develUpgrade mesa-dri-driversUpgrade libdrm-debugsourceUpgrade libX11-develUpgrade libinput-utils-debuginfoUpgrade libinput-utilsUpgrade mesa-libGL-develNo solution existsUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libgbm-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libX11-commonUpgrade libinputUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XnestUpgrade libinput-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade mesa-libglapiUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade egl-waylandUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-debugsourceUpgrade libglvndUpgrade libX11-xcbUpgrade xorg-x11-server-XvfbUpgrade libglvnd-openglUpgrade xorg-x11-server-XephyrUpgrade libglvnd-glx-debuginfoUpgrade libwacomUpgrade libX11Upgrade mesa-libEGL-debuginfoUpgrade mesa-libOSMesa | Dec 15, 2020 | Aug 5, 2020 |
| Rocky_linux | — | Upgrade mesa-libEGL-develUpgrade libX11-xcbUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libX11Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade libdrm-debugsourceUpgrade mesa-vulkan-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-openglUpgrade mesa-filesystemUpgrade libwacom-debugsourceUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-vdpau-driversUpgrade mesa-libGLUpgrade libwacom-develUpgrade mesa-libOSMesaUpgrade mesa-vulkan-driversUpgrade libdrm-develUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-develUpgrade libglvnd-glxUpgrade xorg-x11-server-debugsourceUpgrade mesa-libEGLUpgrade mesa-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-libgbmUpgrade libX11-debugsourceUpgrade libglvnd-eglUpgrade libglvnd-egl-debuginfoUpgrade libwacomUpgrade libX11-debuginfoUpgrade libinput-debugsourceUpgrade libX11-xcb-debuginfoUpgrade libinput-utils-debuginfoUpgrade libinputUpgrade mesa-libglapi-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-glesUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-core-develUpgrade libX11-develUpgrade xorg-x11-driversUpgrade libglvndUpgrade libglvnd-gles-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libGL-debuginfoUpgrade mesa-libgbm-develUpgrade mesa-libGL-develUpgrade libglvnd-debugsourceUpgrade libdrmUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libinput-utilsUpgrade egl-waylandUpgrade libinput-debuginfoUpgrade egl-wayland-debugsourceUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-dri-driversUpgrade libdrm-debuginfoUpgrade mesa-libOSMesa-develUpgrade libinput-develUpgrade xorg-x11-server-XorgUpgrade mesa-libglapiUpgrade xorg-x11-server-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xvfb-debuginfo | Mar 12, 2024 | Aug 5, 2020 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-XvncUpgrade xorg-x11-server-extra | Aug 27, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-coreUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 | Sep 3, 2020 | Jul 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub