A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mesa-libOSMesa-develUpgrade libinput-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade libglvnd-eglUpgrade libwacom-develUpgrade xorg-x11-driversUpgrade mesa-libgbm-develUpgrade libglvnd-glxUpgrade libglvnd-openglUpgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade libglvnd-develUpgrade libglvnd | May 4, 2022 | Aug 5, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Aug 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xdmx | Jan 27, 2021 | Aug 5, 2020 |
| Centos_linux | — | Upgrade xorg-x11-server-sourceUpgrade libX11-debugsourceUpgrade mesa-filesystemUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvndUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-glxUpgrade mesa-dri-driversUpgrade mesa-libgbm-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XnestUpgrade libX11Upgrade libX11-debuginfoUpgrade libwacom-dataUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacomUpgrade mesa-debugsourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-debuginfoUpgrade libX11-xcbUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-libxatrackerUpgrade libglvnd-glx-debuginfoUpgrade libinputUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XorgUpgrade mesa-vulkan-driversUpgrade libX11-develUpgrade egl-waylandUpgrade mesa-vdpau-driversUpgrade libinput-test-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libdrm-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-driversUpgrade mesa-libEGL-develUpgrade libglvnd-eglUpgrade drm-utils-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libglapiUpgrade mesa-debuginfoUpgrade libX11-commonUpgrade libinput-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libdrm-develUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libgbmUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade mesa-libEGLUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-glesUpgrade libglvnd-debugsourceUpgrade libdrmUpgrade libglvnd-openglUpgrade egl-wayland-debugsourceUpgrade mesa-libOSMesaUpgrade libinput-utils-debuginfoUpgrade libwacom-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libGL-develUpgrade xorg-x11-server-XdmxUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libGLUpgrade libinput-utilsUpgrade mesa-libGL-debuginfoUpgrade libinput-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-devel | Dec 15, 2020 | Aug 5, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Aug 5, 2020 |
| Freebsd | — | Upgrade xephyrUpgrade xwaylandUpgrade xorg-vfbserverUpgrade xorg-dmxUpgrade xorg-nestserverUpgrade xorg-server | Aug 2, 2020 | Aug 1, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Feb 22, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Dec 15, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Aug 5, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xvnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/header/x11-protocols to version 7.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Aug 5, 2020 |
| Oracle_linux | — | Upgrade libwacomUpgrade libwacom-dataUpgrade libglvnd-eglUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade mesa-vdpau-driversUpgrade libX11-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade egl-waylandUpgrade libX11-xcbUpgrade mesa-dri-driversUpgrade libglvndUpgrade libwacom-develUpgrade libX11-develUpgrade mesa-filesystemUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade libinput-develUpgrade libinputUpgrade xorg-x11-server-develUpgrade mesa-libgbm-develUpgrade mesa-libEGLUpgrade libglvnd-develUpgrade libinput-utilsUpgrade mesa-libOSMesaUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XdmxUpgrade mesa-libgbmUpgrade libglvnd-glxUpgrade libX11Upgrade mesa-libOSMesa-develUpgrade mesa-libGLUpgrade xorg-x11-server-XnestUpgrade mesa-libGL-develUpgrade libdrmUpgrade mesa-libglapiUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade mesa-vulkan-develUpgrade mesa-libEGL-develUpgrade libdrm-devel | Dec 15, 2020 | Jul 31, 2020 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libgbm-develUpgrade libinput-utils-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libglapiUpgrade mesa-libGL-debuginfoUpgrade libinput-utilsUpgrade xorg-x11-driversUpgrade libglvnd-glesUpgrade libglvnd-debugsourceUpgrade egl-wayland-debugsourceUpgrade libglvnd-debuginfoUpgrade libglvndUpgrade libX11-debugsourceUpgrade libinput-debuginfoNo solution existsUpgrade libinputUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libX11-xcbUpgrade libglvnd-develUpgrade mesa-libGL-develUpgrade libinput-develUpgrade libglvnd-opengl-debuginfoUpgrade libX11-commonUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libX11-develUpgrade mesa-libGLUpgrade mesa-libgbmUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-develUpgrade mesa-dri-driversUpgrade mesa-libgbm-debuginfoUpgrade egl-waylandUpgrade libwacom-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libdrmUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-eglUpgrade xorg-x11-server-XvfbUpgrade libinput-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade mesa-vulkan-develUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade drm-utils-debuginfoUpgrade libwacom-dataUpgrade mesa-debugsourceUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-sourceUpgrade libdrm-debuginfoUpgrade libwacom-develUpgrade mesa-libEGLUpgrade libwacomUpgrade libglvnd-glx-debuginfoUpgrade libX11Upgrade mesa-libOSMesaUpgrade mesa-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libdrm-develUpgrade egl-wayland-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-glxUpgrade libX11-debuginfoUpgrade mesa-filesystemUpgrade libglvnd-openglUpgrade libwacom-debugsourceUpgrade xorg-x11-server-develUpgrade libinput-test-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libxatracker | Dec 15, 2020 | Aug 5, 2020 |
| Rocky_linux | — | Upgrade xorg-x11-server-XephyrUpgrade libglvnd-eglUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-openglUpgrade libX11-xcb-debuginfoUpgrade mesa-vulkan-driversUpgrade libwacom-develUpgrade libglvnd-develUpgrade libglvnd-glxUpgrade mesa-libGLUpgrade xorg-x11-server-debugsourceUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-vdpau-driversUpgrade mesa-libOSMesaUpgrade mesa-vulkan-develUpgrade libglvnd-glx-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libX11-debugsourceUpgrade libX11-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-commonUpgrade libwacom-debuginfoUpgrade mesa-debuginfoUpgrade libX11-xcbUpgrade xorg-x11-server-XdmxUpgrade libglvnd-debuginfoUpgrade mesa-libEGLUpgrade mesa-libgbmUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-filesystemUpgrade libinput-debugsourceUpgrade libdrm-debugsourceUpgrade libX11Upgrade libdrm-develUpgrade libwacomUpgrade libwacom-debugsourceUpgrade libinputUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade egl-waylandUpgrade mesa-libxatracker-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libxatrackerUpgrade libglvnd-glesUpgrade mesa-libglapi-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libgbm-develUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libOSMesa-develUpgrade libinput-develUpgrade xorg-x11-driversUpgrade libglvndUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-core-develUpgrade mesa-libgbm-debuginfoUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libglapiUpgrade libdrm-debuginfoUpgrade egl-wayland-debugsourceUpgrade mesa-dri-driversUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libGL-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-debugsourceUpgrade libdrmUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade libinput-utilsUpgrade libglvnd-debugsourceUpgrade libX11-devel | Mar 12, 2024 | Aug 5, 2020 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-serverUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-xvncUpgrade xorg-x11-server-extra | Aug 27, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04 | Sep 3, 2020 | Jul 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub