A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mesa-libgbm-develUpgrade mesa-libOSMesa-develUpgrade libglvnd-core-develUpgrade libglvndUpgrade libglvnd-glesUpgrade libwacom-develUpgrade xorg-x11-driversUpgrade libglvnd-develUpgrade libinput-develUpgrade libglvnd-openglUpgrade libglvnd-eglUpgrade xorg-x11-server-develUpgrade libglvnd-glxUpgrade xorg-x11-server-source | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade mesa-libOSMesaUpgrade xorg-x11-server-develUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libGLUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libEGL-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-libgbmUpgrade xorg-x11-server-XvfbUpgrade libinput-utils-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libwacom-debuginfoUpgrade libwacom-debugsourceUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGLUpgrade mesa-libglapiUpgrade libinput-debugsourceUpgrade libinput-test-debuginfoUpgrade libX11Upgrade libwacom-dataUpgrade mesa-debugsourceUpgrade libglvnd-eglUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-libGL-develUpgrade libinput-debuginfoUpgrade libX11-commonUpgrade libX11-xcbUpgrade libdrm-debugsourceUpgrade libX11-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-glesUpgrade xorg-x11-driversUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade libdrm-debuginfoUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade mesa-libxatracker-debuginfoUpgrade libwacomUpgrade libglvndUpgrade libdrm-develUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libX11-develUpgrade egl-wayland-debugsourceUpgrade libdrmUpgrade libglvnd-openglUpgrade mesa-vulkan-driversUpgrade libglvnd-opengl-debuginfoUpgrade mesa-filesystemUpgrade mesa-dri-driversUpgrade libinput-utilsUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-vulkan-develUpgrade libglvnd-develUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-core-develUpgrade libX11-debuginfoUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-glxUpgrade egl-waylandUpgrade libglvnd-debugsourceUpgrade mesa-libGL-debuginfoUpgrade libinput | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-nestserverUpgrade xorg-dmxUpgrade xephyrUpgrade xwaylandUpgrade xorg-serverUpgrade xorg-vfbserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade mesa-filesystemUpgrade mesa-dri-driversUpgrade egl-waylandUpgrade libinput-develUpgrade mesa-vdpau-driversUpgrade libX11Upgrade xorg-x11-server-sourceUpgrade libX11-xcbUpgrade libwacom-dataUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade libglvnd-glxUpgrade libX11-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-vulkan-develUpgrade xorg-x11-server-develUpgrade mesa-libxatrackerUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade libglvndUpgrade xorg-x11-server-XvfbUpgrade libinputUpgrade libwacom-develUpgrade mesa-libglapiUpgrade libwacomUpgrade xorg-x11-server-XnestUpgrade mesa-libgbm-develUpgrade mesa-libGL-develUpgrade xorg-x11-driversUpgrade mesa-libgbmUpgrade libdrm-develUpgrade libinput-utilsUpgrade mesa-libOSMesa-develUpgrade libX11-commonUpgrade libglvnd-eglUpgrade libglvnd-develUpgrade mesa-libOSMesaUpgrade libdrmUpgrade libglvnd-openglUpgrade mesa-libGLUpgrade mesa-libEGLUpgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade mesa-vulkan-drivers | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-debuginfoUpgrade mesa-libgbm-develUpgrade xorg-x11-server-debugsourceUpgrade mesa-libglapiUpgrade libdrm-develUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-core-develUpgrade mesa-libGL-debuginfoUpgrade libX11-debugsourceUpgrade libglvndUpgrade libglvnd-glesUpgrade mesa-libGLUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libinput-utils-debuginfoUpgrade libinput-utilsUpgrade libglvnd-debuginfoUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XdmxUpgrade libinput-debugsourceUpgrade xorg-x11-server-XnestUpgrade mesa-libGL-develUpgrade mesa-debugsourceUpgrade libinput-debuginfoUpgrade libX11-xcbUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libOSMesaUpgrade libdrmUpgrade mesa-libEGL-develUpgrade libglvnd-gles-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libOSMesa-develUpgrade egl-wayland-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-eglUpgrade libglvnd-egl-debuginfoUpgrade libinput-develUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XephyrUpgrade mesa-libgbm-debuginfoUpgrade libX11Upgrade xorg-x11-server-commonUpgrade libdrm-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade libwacomUpgrade libX11-debuginfoNo solution existsUpgrade xorg-x11-server-Xnest-debuginfoUpgrade egl-wayland-debuginfoUpgrade libinputUpgrade libX11-develUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libEGLUpgrade libinput-test-debuginfoUpgrade xorg-x11-driversUpgrade libX11-commonUpgrade xorg-x11-server-develUpgrade mesa-vdpau-driversUpgrade mesa-filesystemUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-dri-driversUpgrade libwacom-develUpgrade libdrm-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-sourceUpgrade mesa-vulkan-develUpgrade libwacom-dataUpgrade libX11-xcb-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libgbmUpgrade egl-waylandUpgrade xorg-x11-server-XvfbUpgrade libglvnd-glx | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libglvnd-openglUpgrade xorg-x11-server-XwaylandUpgrade libglvndUpgrade xorg-x11-server-debugsourceUpgrade libX11Upgrade libX11-xcb-debuginfoUpgrade libinput-utilsUpgrade xorg-x11-server-debuginfoUpgrade libdrmUpgrade libwacom-develUpgrade mesa-dri-driversUpgrade libglvnd-glxUpgrade libdrm-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-driversUpgrade libglvnd-develUpgrade mesa-libgbm-develUpgrade libdrm-develUpgrade libglvnd-core-develUpgrade mesa-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libinput-debugsourceUpgrade libX11-debuginfoUpgrade mesa-vulkan-driversUpgrade mesa-vulkan-develUpgrade mesa-dri-drivers-debuginfoUpgrade egl-waylandUpgrade mesa-filesystemUpgrade libglvnd-glx-debuginfoUpgrade mesa-libOSMesaUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XnestUpgrade libdrm-debugsourceUpgrade mesa-libglapiUpgrade mesa-libOSMesa-develUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-vdpau-driversUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-XvfbUpgrade libwacom-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libX11-xcbUpgrade libglvnd-debuginfoUpgrade mesa-libgbmUpgrade mesa-libxatracker-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-glesUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-utils-debuginfoUpgrade libinputUpgrade libinput-develUpgrade libwacomUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-libGLUpgrade xorg-x11-server-XephyrUpgrade mesa-libGL-develUpgrade xorg-x11-server-XdmxUpgrade libglvnd-eglUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-develUpgrade libX11-develUpgrade mesa-libEGL-develUpgrade libX11-debugsourceUpgrade libinput-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libEGLUpgrade libglvnd-debugsource | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-XvncUpgrade xorg-x11-server-extra | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub