A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-driversUpgrade mesa-libgbm-develUpgrade libglvndUpgrade libglvnd-develUpgrade libglvnd-glesUpgrade libglvnd-openglUpgrade libglvnd-glxUpgrade libglvnd-core-develUpgrade xorg-x11-server-develUpgrade libinput-develUpgrade mesa-libOSMesa-develUpgrade libwacom-develUpgrade libglvnd-eglUpgrade xorg-x11-server-source | May 4, 2022 | Aug 5, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Aug 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xephyr | Jan 27, 2021 | Aug 5, 2020 |
| Centos_linux | — | Upgrade libinput-utilsUpgrade mesa-libGL-debuginfoUpgrade libdrm-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-XdmxUpgrade mesa-libOSMesaUpgrade libglvnd-opengl-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-libGLUpgrade mesa-libEGL-develUpgrade mesa-libgbmUpgrade libglvnd-eglUpgrade mesa-libxatracker-debuginfoUpgrade libdrm-develUpgrade xorg-x11-driversUpgrade xorg-x11-server-develUpgrade libglvnd-glesUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libdrmUpgrade libglvnd-debugsourceUpgrade mesa-libEGLUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-core-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade libwacom-debuginfoUpgrade libinput-utils-debuginfoUpgrade libinput-debugsourceUpgrade mesa-debuginfoUpgrade libdrm-debuginfoUpgrade libglvnd-develUpgrade xorg-x11-server-XwaylandUpgrade libinput-debuginfoUpgrade mesa-libGL-develUpgrade drm-utils-debuginfoUpgrade egl-wayland-debugsourceUpgrade libglvnd-openglUpgrade libwacom-debugsourceUpgrade libX11-commonUpgrade libglvnd-egl-debuginfoUpgrade mesa-vdpau-driversUpgrade mesa-filesystemUpgrade egl-wayland-debuginfoUpgrade mesa-dri-driversUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-develUpgrade mesa-libglapi-debuginfoUpgrade mesa-debugsourceUpgrade libwacomUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade mesa-libOSMesa-debuginfoUpgrade libX11-xcbUpgrade libglvnd-debuginfoUpgrade libglvndUpgrade mesa-libgbm-debuginfoUpgrade egl-waylandUpgrade libX11-debugsourceUpgrade libX11Upgrade xorg-x11-server-XorgUpgrade libinputUpgrade libglvnd-glxUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacom-dataUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-XvfbUpgrade mesa-vulkan-driversUpgrade mesa-libEGL-debuginfo | Dec 15, 2020 | Aug 5, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Aug 5, 2020 |
| Freebsd | — | Upgrade xorg-dmxUpgrade xwaylandUpgrade xorg-serverUpgrade xorg-nestserverUpgrade xorg-vfbserverUpgrade xephyr | Aug 2, 2020 | Aug 1, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Feb 22, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Dec 15, 2020 | Aug 5, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Nov 3, 2020 | Aug 5, 2020 |
| Oracle Solaris | — | Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/header/x11-protocols to version 7.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Aug 5, 2020 |
| Oracle_linux | — | Upgrade mesa-vulkan-driversUpgrade mesa-libOSMesaUpgrade mesa-libgbmUpgrade xorg-x11-server-XdmxUpgrade libglvnd-glxUpgrade libX11Upgrade mesa-libglapiUpgrade libdrm-develUpgrade xorg-x11-server-develUpgrade mesa-libGL-develUpgrade libglvnd-develUpgrade mesa-libgbm-develUpgrade xorg-x11-server-XnestUpgrade mesa-libEGL-develUpgrade libglvnd-core-develUpgrade mesa-libEGLUpgrade libinput-utilsUpgrade libdrmUpgrade mesa-libGLUpgrade mesa-libOSMesa-develUpgrade libglvnd-glesUpgrade mesa-vulkan-develUpgrade libwacom-dataUpgrade xorg-x11-server-XephyrUpgrade mesa-vdpau-driversUpgrade libX11-xcbUpgrade libwacomUpgrade egl-waylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade mesa-filesystemUpgrade xorg-x11-server-commonUpgrade xorg-x11-driversUpgrade libglvnd-eglUpgrade mesa-dri-driversUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-openglUpgrade libX11-develUpgrade libwacom-develUpgrade libglvndUpgrade libX11-commonUpgrade libinput-develUpgrade libinput | Dec 15, 2020 | Jul 31, 2020 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-debugsourceUpgrade libglvnd-develUpgrade egl-waylandUpgrade libX11-develUpgrade mesa-libEGL-develUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade mesa-libOSMesa-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libGLUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XnestUpgrade mesa-libglapiUpgrade mesa-dri-driversUpgrade libglvndUpgrade libX11-debugsourceUpgrade mesa-libgbm-develNo solution existsUpgrade libX11-commonUpgrade libglvnd-glesUpgrade mesa-libgbmUpgrade egl-wayland-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libinputUpgrade libinput-utilsUpgrade libwacom-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libX11-xcbUpgrade libinput-develUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libinput-utils-debuginfoUpgrade xorg-x11-driversUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-core-develUpgrade libwacom-dataUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade drm-utils-debuginfoUpgrade libwacomUpgrade libdrmUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libwacom-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-eglUpgrade xorg-x11-server-XorgUpgrade mesa-vdpau-driversUpgrade libglvnd-openglUpgrade mesa-libEGLUpgrade libinput-test-debuginfoUpgrade libwacom-debugsourceUpgrade xorg-x11-server-develUpgrade libglvnd-egl-debuginfoUpgrade libX11Upgrade mesa-libOSMesaUpgrade libglvnd-glx-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-XdmxUpgrade egl-wayland-debuginfoUpgrade libX11-debuginfoUpgrade libdrm-develUpgrade mesa-debuginfoUpgrade xorg-x11-server-sourceUpgrade mesa-vulkan-driversUpgrade libglvnd-glxUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-debugsourceUpgrade mesa-libxatrackerUpgrade mesa-vulkan-drivers-debuginfoUpgrade libinput-debugsourceUpgrade mesa-filesystem | Dec 15, 2020 | Aug 5, 2020 |
| Rocky_linux | — | Upgrade libglvnd-eglUpgrade mesa-vdpau-driversUpgrade libwacomUpgrade libdrm-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-libEGL-develUpgrade libX11-xcbUpgrade mesa-vulkan-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade libX11-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-libGLUpgrade libwacom-debuginfoUpgrade mesa-libOSMesaUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-openglUpgrade mesa-vulkan-driversUpgrade mesa-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libinput-debugsourceUpgrade libwacom-develUpgrade libglvnd-glx-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libX11Upgrade mesa-dri-drivers-debuginfoUpgrade mesa-libEGLUpgrade xorg-x11-server-commonUpgrade libX11-debugsourceUpgrade libglvnd-develUpgrade libwacom-debugsourceUpgrade mesa-filesystemUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libglvnd-glxUpgrade xorg-x11-server-debugsourceUpgrade mesa-libgbmUpgrade xorg-x11-server-XnestUpgrade libinputUpgrade libX11-develUpgrade mesa-libgbm-debuginfoUpgrade egl-wayland-debuginfoUpgrade egl-wayland-debugsourceUpgrade xorg-x11-driversUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libglvndUpgrade mesa-libglapiUpgrade mesa-libxatrackerUpgrade libglvnd-gles-debuginfoUpgrade mesa-libgbm-develUpgrade libglvnd-glesUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libGL-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-XorgUpgrade mesa-libOSMesa-develUpgrade libinput-utilsUpgrade xorg-x11-server-XvfbUpgrade libinput-develUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGL-develUpgrade mesa-debugsourceUpgrade libglvnd-debugsourceUpgrade libdrmUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libdrm-debuginfoUpgrade libglvnd-core-develUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-dri-drivers | Mar 12, 2024 | Aug 5, 2020 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-xvncUpgrade xorg-x11-server-extra | Aug 27, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core | Sep 3, 2020 | Jul 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub