A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-openglUpgrade libglvnd-eglUpgrade libglvnd-glxUpgrade xorg-x11-server-sourceUpgrade libwacom-develUpgrade libinput-develUpgrade xorg-x11-driversUpgrade xorg-x11-server-develUpgrade libglvnd-develUpgrade libglvndUpgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade mesa-libgbm-develUpgrade mesa-libOSMesa-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-filesystemUpgrade libinput-utilsUpgrade libglvnd-glesUpgrade libglvnd-opengl-debuginfoUpgrade mesa-dri-driversUpgrade libglvnd-openglUpgrade libX11-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libwacomUpgrade libdrm-develUpgrade egl-wayland-debuginfoUpgrade egl-wayland-debugsourceUpgrade libX11-develUpgrade xorg-x11-driversUpgrade egl-waylandUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-glxUpgrade libX11-xcb-debuginfoUpgrade libglvnd-debugsourceUpgrade libinputUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-driversUpgrade drm-utils-debuginfoUpgrade libglvndUpgrade libdrm-debuginfoUpgrade mesa-vdpau-driversUpgrade mesa-vulkan-develUpgrade mesa-libOSMesa-debuginfoUpgrade libdrmUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-core-develUpgrade libglvnd-develUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-sourceUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XnestUpgrade libinput-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-test-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-debuginfoUpgrade mesa-libGLUpgrade mesa-libglapi-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-eglUpgrade xorg-x11-server-commonUpgrade mesa-libGL-develUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XvfbUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-vdpau-drivers-debuginfoUpgrade libinput-debuginfoUpgrade libX11Upgrade libX11-xcbUpgrade libX11-commonUpgrade libX11-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade mesa-libEGLUpgrade libglvnd-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-libgbmUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libwacom-dataUpgrade mesa-debugsourceUpgrade xorg-x11-server-develUpgrade mesa-libOSMesaUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libglapiUpgrade libinput-utils-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xwaylandUpgrade xephyrUpgrade xorg-serverUpgrade xorg-dmxUpgrade xorg-nestserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libinput-utilsUpgrade libdrmUpgrade mesa-libOSMesaUpgrade mesa-libGL-develUpgrade mesa-libGLUpgrade mesa-libEGLUpgrade libglvnd-core-develUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade mesa-libgbmUpgrade libglvnd-eglUpgrade libX11-commonUpgrade mesa-vulkan-driversUpgrade mesa-libOSMesa-develUpgrade libglvnd-develUpgrade libglvnd-glesUpgrade libdrm-develUpgrade mesa-libgbm-develUpgrade libglvndUpgrade mesa-vulkan-develUpgrade libwacomUpgrade libX11-develUpgrade xorg-x11-server-XorgUpgrade mesa-libEGL-develUpgrade mesa-filesystemUpgrade libwacom-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade mesa-vdpau-driversUpgrade mesa-dri-driversUpgrade libinput-develUpgrade egl-waylandUpgrade mesa-libxatrackerUpgrade libX11Upgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade mesa-libglapiUpgrade libinputUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XephyrUpgrade libX11-xcbUpgrade libwacom-dataUpgrade libglvnd-glx | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade xorg-x11-server-XdmxUpgrade libX11-xcbUpgrade libdrm-develUpgrade libinput-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-debuginfoUpgrade mesa-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libxatrackerUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade drm-utils-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libOSMesaUpgrade mesa-libGLUpgrade libglvndUpgrade libinput-utilsUpgrade mesa-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade egl-wayland-debugsourceUpgrade mesa-libgbm-develUpgrade libwacom-debuginfoUpgrade mesa-libglapiUpgrade mesa-libEGL-develUpgrade libglvnd-debugsourceUpgrade libglvnd-glesUpgrade libdrmUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-core-develUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XnestUpgrade libinput-utils-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libdrm-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-sourceUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-glxUpgrade libX11-commonUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libwacom-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-libEGLUpgrade libglvnd-eglUpgrade libX11-develUpgrade libwacom-dataUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade libX11Upgrade libinputUpgrade libX11-debuginfoUpgrade xorg-x11-driversUpgrade mesa-filesystemUpgrade libinput-test-debuginfoUpgrade libglvnd-openglUpgrade mesa-libEGL-debuginfoUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-develUpgrade libX11-xcb-debuginfoUpgrade libwacom-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoNo solution existsUpgrade egl-wayland-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libgbmUpgrade libdrm-debugsourceUpgrade mesa-vdpau-driversUpgrade libwacomUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-develUpgrade mesa-libgbm-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libinput-develUpgrade mesa-dri-drivers | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade mesa-libglapiUpgrade libglvnd-debugsourceUpgrade libinputUpgrade mesa-libEGLUpgrade mesa-libEGL-develUpgrade libinput-debuginfoUpgrade libX11-debugsourceUpgrade libX11-develUpgrade libglvnd-debuginfoUpgrade mesa-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-libgbmUpgrade libinput-utils-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-glesUpgrade libglvnd-eglUpgrade mesa-libxatrackerUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade mesa-libEGL-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libinput-develUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libdrm-debugsourceUpgrade libwacomUpgrade mesa-libOSMesa-develUpgrade mesa-libGLUpgrade egl-wayland-debugsourceUpgrade libwacom-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-vdpau-driversUpgrade libX11-xcbUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libGL-develUpgrade libglvnd-gles-debuginfoUpgrade libwacom-debugsourceUpgrade xorg-x11-server-XephyrUpgrade libX11Upgrade xorg-x11-server-XorgUpgrade libglvnd-glxUpgrade libdrm-debuginfoUpgrade libX11-debuginfoUpgrade libinput-debugsourceUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libinput-utilsUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade mesa-vulkan-driversUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debugsourceUpgrade libglvndUpgrade libglvnd-openglUpgrade libwacom-develUpgrade libdrmUpgrade mesa-dri-driversUpgrade egl-waylandUpgrade mesa-vulkan-develUpgrade libglvnd-develUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-driversUpgrade mesa-libgbm-develUpgrade mesa-libOSMesaUpgrade libX11-xcb-debuginfoUpgrade mesa-filesystemUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-Xvnc | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub