A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-eglUpgrade libglvnd-glxUpgrade xorg-x11-driversUpgrade xorg-x11-server-develUpgrade libinput-develUpgrade libglvnd-develUpgrade libglvnd-openglUpgrade libwacom-develUpgrade xorg-x11-server-sourceUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-develUpgrade libglvnd-glesUpgrade mesa-libgbm-develUpgrade libglvnd | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libdrm-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-openglUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libX11-develUpgrade libglvnd-glesUpgrade libinputUpgrade mesa-libGL-debuginfoUpgrade egl-wayland-debugsourceUpgrade libglvnd-glxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-vulkan-driversUpgrade libglvnd-debugsourceUpgrade egl-wayland-debuginfoUpgrade drm-utils-debuginfoUpgrade libglvndUpgrade libglvnd-opengl-debuginfoUpgrade libwacomUpgrade libX11-debuginfoUpgrade xorg-x11-driversUpgrade egl-waylandUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-dri-driversUpgrade libdrm-develUpgrade libglvnd-glx-debuginfoUpgrade mesa-vulkan-develUpgrade libdrmUpgrade mesa-vdpau-driversUpgrade libglvnd-develUpgrade libinput-utilsUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-filesystemUpgrade libwacom-debugsourceUpgrade xorg-x11-server-XvfbUpgrade libX11-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libEGLUpgrade mesa-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-libEGL-develUpgrade libdrm-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libinput-debugsourceUpgrade mesa-debugsourceUpgrade libwacom-dataUpgrade libglvnd-eglUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade mesa-libGL-develUpgrade xorg-x11-server-develUpgrade mesa-libOSMesaUpgrade xorg-x11-server-sourceUpgrade mesa-libGLUpgrade libX11-commonUpgrade mesa-libEGL-debuginfoUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libgbmUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libglapiUpgrade libinput-utils-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libX11Upgrade libinput-debuginfoUpgrade libX11-xcbUpgrade libinput-test-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-nestserverUpgrade xorg-vfbserverUpgrade xorg-dmxUpgrade xorg-serverUpgrade xephyrUpgrade xwayland | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade libinput-utilsUpgrade mesa-libgbmUpgrade mesa-libEGLUpgrade mesa-vulkan-driversUpgrade libglvnd-openglUpgrade mesa-libGLUpgrade libglvnd-eglUpgrade libglvnd-develUpgrade libdrm-develUpgrade libX11-commonUpgrade mesa-libOSMesaUpgrade libdrmUpgrade xorg-x11-driversUpgrade mesa-libgbm-develUpgrade mesa-libGL-develUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-develUpgrade libinputUpgrade libglvnd-glxUpgrade libwacom-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade libX11Upgrade mesa-vdpau-driversUpgrade mesa-dri-driversUpgrade libinput-develUpgrade egl-waylandUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XdmxUpgrade mesa-libglapiUpgrade xorg-x11-server-XnestUpgrade libwacomUpgrade xorg-x11-server-XephyrUpgrade mesa-filesystemUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XorgUpgrade libX11-develUpgrade libwacom-dataUpgrade libglvndUpgrade xorg-x11-server-XwaylandUpgrade mesa-vulkan-develUpgrade libX11-xcb | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade libwacom-debugsourceUpgrade libwacom-dataUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade libinputUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-sourceUpgrade libglvnd-eglUpgrade libX11-develUpgrade mesa-vulkan-driversUpgrade mesa-dri-driversUpgrade libglvnd-develUpgrade mesa-libEGLUpgrade libglvnd-openglUpgrade libX11-xcb-debuginfoUpgrade libX11-commonUpgrade libglvnd-glxUpgrade xorg-x11-driversUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinput-test-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libinput-develUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XephyrNo solution existsUpgrade libX11-debuginfoUpgrade libwacomUpgrade mesa-libEGL-debuginfoUpgrade mesa-filesystemUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-develUpgrade libglvnd-egl-debuginfoUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-debuginfoUpgrade mesa-libgbmUpgrade egl-waylandUpgrade mesa-vulkan-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libwacom-develUpgrade libdrm-debugsourceUpgrade libX11Upgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XnestUpgrade drm-utils-debuginfoUpgrade mesa-libgbm-develUpgrade libwacom-debuginfoUpgrade mesa-debuginfoUpgrade mesa-libOSMesa-develUpgrade libinput-debugsourceUpgrade xorg-x11-server-XdmxUpgrade libglvnd-core-develUpgrade libX11-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGL-develUpgrade libinput-utils-debuginfoUpgrade libglvndUpgrade xorg-x11-server-XorgUpgrade libdrmUpgrade libX11-xcbUpgrade mesa-libxatrackerUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-glesUpgrade libglvnd-debuginfoUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-XwaylandUpgrade mesa-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade egl-wayland-debugsourceUpgrade mesa-libGLUpgrade libinput-utilsUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libEGL-develUpgrade libinput-debuginfoUpgrade mesa-libOSMesaUpgrade libdrm-devel | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade xorg-x11-server-XvfbUpgrade libglvnd-egl-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libgbmUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libEGL-develUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-commonUpgrade libglvnd-eglUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XdmxUpgrade mesa-libGL-develUpgrade mesa-libxatrackerUpgrade libX11-develUpgrade libwacomUpgrade libdrm-debugsourceUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libinput-develUpgrade egl-wayland-debugsourceUpgrade libwacom-debugsourceUpgrade mesa-libOSMesa-develUpgrade libX11-xcbUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libglapiUpgrade libglvnd-debuginfoUpgrade libinputUpgrade mesa-libEGLUpgrade libglvnd-glesUpgrade libwacom-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libGLUpgrade mesa-dri-drivers-debuginfoUpgrade libinput-utilsUpgrade libdrmUpgrade libwacom-develUpgrade libglvnd-develUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-driversUpgrade mesa-vulkan-develUpgrade mesa-dri-driversUpgrade libX11Upgrade mesa-libgbm-develUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-openglUpgrade mesa-filesystemUpgrade mesa-debuginfoUpgrade libX11-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libglvnd-glxUpgrade libinput-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libOSMesaUpgrade xorg-x11-server-XorgUpgrade libglvnd-glx-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-libGL-debuginfoUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade libglvndUpgrade egl-waylandUpgrade xorg-x11-server-Xwayland-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-extraUpgrade xorg-x11-XvncUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub