A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-develUpgrade libglvnd-develUpgrade libinput-develUpgrade xorg-x11-driversUpgrade libglvnd-glxUpgrade libglvnd-openglUpgrade xorg-x11-server-sourceUpgrade libwacom-develUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-develUpgrade libglvndUpgrade mesa-libgbm-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xorg | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade mesa-dri-driversUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade egl-wayland-debuginfoUpgrade libinput-utilsUpgrade libX11-develUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade libdrm-develUpgrade libglvnd-develUpgrade libX11-xcb-debuginfoUpgrade mesa-filesystemUpgrade mesa-vulkan-develUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-vdpau-driversUpgrade drm-utils-debuginfoUpgrade libglvndUpgrade xorg-x11-server-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade libdrmUpgrade xorg-x11-driversUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libinputUpgrade mesa-libGL-debuginfoUpgrade libdrm-debuginfoUpgrade libwacomUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-openglUpgrade mesa-vulkan-driversUpgrade libglvnd-glesUpgrade libX11-debuginfoUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-XorgUpgrade libglvnd-glxUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libX11-xcbUpgrade libinput-debuginfoUpgrade libX11-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libEGLUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libX11-commonUpgrade libX11Upgrade mesa-debuginfoUpgrade libinput-test-debuginfoUpgrade mesa-libGLUpgrade xorg-x11-server-XnestUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libEGL-develUpgrade libwacom-debugsourceUpgrade libwacom-debuginfoUpgrade libinput-debugsourceUpgrade libdrm-debugsourceUpgrade xorg-x11-server-commonUpgrade libwacom-dataUpgrade libglvnd-eglUpgrade xorg-x11-server-develUpgrade mesa-libOSMesaUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libGL-develUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XephyrUpgrade mesa-libglapiUpgrade libinput-utils-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-sourceUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-libgbm | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xephyrUpgrade xorg-nestserverUpgrade xorg-serverUpgrade xorg-vfbserverUpgrade xwaylandUpgrade xorg-dmx | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libinputUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade mesa-libEGL-develUpgrade mesa-libglapiUpgrade libwacom-develUpgrade xorg-x11-server-XvfbUpgrade mesa-filesystemUpgrade xorg-x11-server-develUpgrade mesa-vulkan-develUpgrade libX11-develUpgrade libglvndUpgrade libwacom-dataUpgrade xorg-x11-server-sourceUpgrade libwacomUpgrade libglvnd-glxUpgrade mesa-libxatrackerUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade libX11Upgrade xorg-x11-server-XephyrUpgrade libX11-xcbUpgrade xorg-x11-server-XwaylandUpgrade libinput-develUpgrade mesa-dri-driversUpgrade egl-waylandUpgrade mesa-vdpau-driversUpgrade xorg-x11-driversUpgrade mesa-libOSMesaUpgrade mesa-libGL-develUpgrade libdrmUpgrade mesa-libgbm-develUpgrade libglvnd-develUpgrade mesa-libEGLUpgrade mesa-vulkan-driversUpgrade libdrm-develUpgrade libglvnd-glesUpgrade mesa-libgbmUpgrade libglvnd-openglUpgrade mesa-libOSMesa-develUpgrade libX11-commonUpgrade libglvnd-eglUpgrade libinput-utilsUpgrade libglvnd-core-develUpgrade mesa-libGL | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade libglvnd-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libgbm-develUpgrade libglvnd-core-develUpgrade mesa-debuginfoUpgrade drm-utils-debuginfoUpgrade mesa-libEGL-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libdrmUpgrade mesa-libGLUpgrade libX11-debugsourceUpgrade mesa-debugsourceUpgrade libinput-debugsourceUpgrade libinput-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XorgUpgrade libdrm-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade egl-wayland-debugsourceUpgrade libglvnd-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvnd-glesUpgrade libglvnd-opengl-debuginfoUpgrade libglvndUpgrade libinput-utils-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libOSMesaUpgrade libinput-utilsUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debugsourceUpgrade mesa-libGL-develUpgrade mesa-libglapi-debuginfoUpgrade mesa-libxatrackerUpgrade libX11-xcbUpgrade libwacom-debuginfoUpgrade libX11-commonUpgrade mesa-vdpau-driversUpgrade libdrm-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-libEGLUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-dri-driversUpgrade xorg-x11-server-debuginfoUpgrade libinput-test-debuginfoUpgrade libglvnd-develUpgrade xorg-x11-driversUpgrade xorg-x11-server-XvfbUpgrade libinputUpgrade libglvnd-eglUpgrade libX11-develUpgrade mesa-vulkan-driversUpgrade mesa-vulkan-develUpgrade libwacom-develUpgrade mesa-vulkan-drivers-debuginfoNo solution existsUpgrade egl-waylandUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libdrm-debugsourceUpgrade libX11Upgrade libinput-develUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade libglvnd-openglUpgrade xorg-x11-server-sourceUpgrade mesa-filesystemUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade egl-wayland-debuginfoUpgrade libwacom-dataUpgrade libglvnd-glxUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libwacomUpgrade libX11-debuginfoUpgrade mesa-libgbmUpgrade xorg-x11-server-develUpgrade libwacom-debugsourceUpgrade libglvnd-egl-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade mesa-libOSMesa-debuginfoUpgrade mesa-vdpau-driversUpgrade egl-wayland-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade libX11-xcbUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-eglUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libwacom-debugsourceUpgrade xorg-x11-server-XnestUpgrade mesa-libOSMesa-develUpgrade libdrm-debugsourceUpgrade libwacom-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libgbmUpgrade mesa-libGLUpgrade xorg-x11-server-develUpgrade mesa-libGL-develUpgrade libwacomUpgrade libinput-develUpgrade xorg-x11-server-XephyrUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libglvnd-glesUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade libinputUpgrade mesa-libEGLUpgrade mesa-libglapiUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libEGL-develUpgrade libX11-develUpgrade libglvnd-debuginfoUpgrade libinput-utils-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libxatrackerUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libwacom-develUpgrade mesa-libgbm-develUpgrade mesa-debuginfoUpgrade libglvnd-openglUpgrade libdrmUpgrade mesa-vulkan-develUpgrade mesa-dri-driversUpgrade libglvnd-glx-debuginfoUpgrade mesa-libOSMesaUpgrade egl-waylandUpgrade libglvnd-glxUpgrade libdrm-debuginfoUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade mesa-vulkan-driversUpgrade mesa-libGL-debuginfoUpgrade libinput-utilsUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-filesystemUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-develUpgrade egl-wayland-debuginfoUpgrade xorg-x11-driversUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-debuginfoUpgrade libinput-debugsourceUpgrade libglvndUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debugsourceUpgrade libX11 | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xorg-x11-Xvnc | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub