A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-eglUpgrade libglvnd-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade libinput-develUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade libwacom-develUpgrade libglvnd-glxUpgrade libglvndUpgrade libglvnd-glesUpgrade mesa-libOSMesa-develUpgrade libglvnd-core-develUpgrade mesa-libgbm-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-source | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libglvnd-openglUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-debugsourceUpgrade libX11-debuginfoUpgrade libglvnd-glesUpgrade libinputUpgrade xorg-x11-server-XorgUpgrade mesa-libGL-debuginfoUpgrade libinput-utilsUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-Xorg-debuginfoUpgrade drm-utils-debuginfoUpgrade libdrm-debuginfoUpgrade libglvndUpgrade xorg-x11-server-XwaylandUpgrade libdrm-develUpgrade mesa-filesystemUpgrade libX11-xcb-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libwacomUpgrade xorg-x11-server-debugsourceUpgrade egl-wayland-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-develUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-vdpau-driversUpgrade libglvnd-core-develUpgrade mesa-vulkan-develUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-glxUpgrade libdrmUpgrade mesa-dri-driversUpgrade xorg-x11-driversUpgrade egl-waylandUpgrade libinput-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libX11Upgrade libX11-xcbUpgrade libX11-debugsourceUpgrade mesa-libgbmUpgrade libinput-utils-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libEGLUpgrade mesa-debuginfoUpgrade libdrm-debugsourceUpgrade libX11-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade mesa-libglapi-debuginfoUpgrade mesa-libGLUpgrade libinput-test-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-debugsourceUpgrade libglvnd-eglUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libEGL-develUpgrade libwacom-debuginfoUpgrade libinput-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libwacom-debugsourceUpgrade libwacom-dataUpgrade mesa-libGL-develUpgrade xorg-x11-server-develUpgrade mesa-libOSMesaUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libglapi | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-dmxUpgrade xorg-nestserverUpgrade xephyrUpgrade xorg-serverUpgrade xwaylandUpgrade xorg-vfbserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade mesa-libEGL-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade libX11Upgrade xorg-x11-server-XwaylandUpgrade libwacom-dataUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XdmxUpgrade libX11-develUpgrade xorg-x11-server-XvfbUpgrade libglvndUpgrade libglvnd-glxUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XephyrUpgrade libX11-xcbUpgrade libwacom-develUpgrade xorg-x11-server-commonUpgrade mesa-filesystemUpgrade xorg-x11-server-XorgUpgrade egl-waylandUpgrade mesa-dri-driversUpgrade libinput-develUpgrade libwacomUpgrade mesa-libglapiUpgrade xorg-x11-server-XnestUpgrade libinputUpgrade mesa-vdpau-driversUpgrade mesa-libgbm-develUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade libX11-commonUpgrade libglvnd-eglUpgrade libglvnd-develUpgrade mesa-vulkan-driversUpgrade mesa-libOSMesa-develUpgrade libdrmUpgrade mesa-libOSMesaUpgrade mesa-libGL-develUpgrade libglvnd-glesUpgrade libglvnd-openglUpgrade mesa-libgbmUpgrade xorg-x11-driversUpgrade libinput-utilsUpgrade mesa-libGLUpgrade mesa-libEGL | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-glx-debuginfoNo solution existsUpgrade mesa-filesystemUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-driversUpgrade egl-wayland-debuginfoUpgrade libinput-develUpgrade xorg-x11-server-commonUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-sourceUpgrade libwacomUpgrade libinput-test-debuginfoUpgrade libglvnd-develUpgrade libX11-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libX11Upgrade libX11-develUpgrade libX11-commonUpgrade libglvnd-openglUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinputUpgrade libdrm-debuginfoUpgrade libX11-xcb-debuginfoUpgrade egl-waylandUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-develUpgrade libwacom-dataUpgrade libglvnd-glxUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-eglUpgrade mesa-libEGL-debuginfoUpgrade mesa-libgbmUpgrade xorg-x11-server-XvfbUpgrade mesa-dri-driversUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XephyrUpgrade libdrm-debugsourceUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacom-develUpgrade mesa-libEGLUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-libxatrackerUpgrade libdrm-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-libgbm-develUpgrade mesa-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-glesUpgrade libglvndUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade libinput-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-debugsourceUpgrade libdrmUpgrade libglvnd-gles-debuginfoUpgrade egl-wayland-debugsourceUpgrade libinput-utils-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvnd-core-develUpgrade mesa-libGL-develUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGLUpgrade mesa-libOSMesaUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libinput-utilsUpgrade mesa-libOSMesa-develUpgrade libX11-debugsourceUpgrade xorg-x11-server-XdmxUpgrade libX11-xcbUpgrade mesa-debugsourceUpgrade mesa-libEGL-develUpgrade drm-utils-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-libglapi | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libdrm-debuginfoUpgrade libglvnd-glxUpgrade libX11-xcb-debuginfoUpgrade libglvnd-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libdrm-develUpgrade mesa-filesystemUpgrade mesa-libGL-debuginfoUpgrade libinput-debugsourceUpgrade libX11-debuginfoUpgrade mesa-debuginfoUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-debugsourceUpgrade libwacom-develUpgrade xorg-x11-server-XwaylandUpgrade mesa-dri-drivers-debuginfoUpgrade libglvndUpgrade libX11Upgrade xorg-x11-server-XorgUpgrade libglvnd-core-develUpgrade libinput-utilsUpgrade xorg-x11-server-debuginfoUpgrade mesa-libOSMesaUpgrade libdrmUpgrade libglvnd-openglUpgrade libglvnd-glx-debuginfoUpgrade mesa-libgbm-develUpgrade mesa-vulkan-develUpgrade mesa-dri-driversUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade egl-waylandUpgrade xorg-x11-driversUpgrade mesa-vdpau-driversUpgrade mesa-libglapiUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libwacom-debugsourceUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XnestUpgrade libdrm-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libinputUpgrade libglvnd-debugsourceUpgrade mesa-libEGLUpgrade xorg-x11-server-commonUpgrade libglvnd-eglUpgrade mesa-libOSMesa-develUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-libgbm-debuginfoUpgrade mesa-libEGL-develUpgrade libX11-develUpgrade libinput-utils-debuginfoUpgrade libX11-debugsourceUpgrade xorg-x11-server-XdmxUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade mesa-libGL-develUpgrade mesa-libGLUpgrade xorg-x11-server-XvfbUpgrade libwacomUpgrade egl-wayland-debugsourceUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libinput-develUpgrade mesa-debugsourceUpgrade libglvnd-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libX11-xcbUpgrade libglvnd-glesUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libgbmUpgrade libglvnd-egl-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-XvncUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdk | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub