A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-glesUpgrade mesa-libOSMesa-develUpgrade mesa-libgbm-develUpgrade libglvndUpgrade libglvnd-core-develUpgrade libglvnd-openglUpgrade libglvnd-glxUpgrade libglvnd-develUpgrade xorg-x11-server-sourceUpgrade libwacom-develUpgrade libglvnd-eglUpgrade xorg-x11-server-develUpgrade xorg-x11-driversUpgrade libinput-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-source | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libwacom-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade libinput-debugsourceUpgrade libwacom-debuginfoUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XvfbUpgrade libdrm-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade libinput-test-debuginfoUpgrade libX11-commonUpgrade libX11-xcbUpgrade mesa-libglapiUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-eglUpgrade mesa-libOSMesaUpgrade libwacom-dataUpgrade xorg-x11-server-develUpgrade mesa-libgbmUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-commonUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-debugsourceUpgrade mesa-vulkan-drivers-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libgbm-debuginfoUpgrade mesa-libEGLUpgrade libinput-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libxatrackerUpgrade mesa-debuginfoUpgrade libX11Upgrade xorg-x11-server-XnestUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libGLUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-sourceUpgrade libglvnd-develUpgrade mesa-vulkan-driversUpgrade libdrmUpgrade mesa-vulkan-develUpgrade libinput-utilsUpgrade mesa-filesystemUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade mesa-dri-driversUpgrade libglvnd-openglUpgrade libX11-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-driversUpgrade libglvnd-glxUpgrade egl-waylandUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libX11-develUpgrade egl-wayland-debugsourceUpgrade libdrm-develUpgrade libglvndUpgrade xorg-x11-server-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libinputUpgrade libglvnd-glesUpgrade libglvnd-debugsourceUpgrade drm-utils-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libwacomUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade mesa-vdpau-driversUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-core-devel | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-serverUpgrade xephyrUpgrade xorg-dmxUpgrade xorg-vfbserverUpgrade xorg-nestserverUpgrade xwayland | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade mesa-libEGL-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade libwacom-dataUpgrade xorg-x11-server-XephyrUpgrade libglvnd-glxUpgrade libX11-develUpgrade libX11-xcbUpgrade mesa-vulkan-develUpgrade libwacom-develUpgrade xorg-x11-server-develUpgrade libinput-develUpgrade xorg-x11-server-sourceUpgrade mesa-dri-driversUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade mesa-filesystemUpgrade egl-waylandUpgrade libglvndUpgrade xorg-x11-server-XdmxUpgrade libX11Upgrade libwacomUpgrade mesa-libglapiUpgrade xorg-x11-server-XnestUpgrade libinputUpgrade mesa-libxatrackerUpgrade mesa-vulkan-driversUpgrade mesa-libGL-develUpgrade mesa-libgbm-develUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade mesa-libgbmUpgrade libglvnd-glesUpgrade libglvnd-eglUpgrade libdrm-develUpgrade libinput-utilsUpgrade libglvnd-develUpgrade mesa-libEGLUpgrade libglvnd-core-develUpgrade mesa-libGLUpgrade mesa-libOSMesa-develUpgrade libX11-commonUpgrade mesa-libOSMesaUpgrade libdrm | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade xorg-x11-server-XdmxUpgrade mesa-libxatrackerUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvndUpgrade mesa-libGL-debuginfoUpgrade mesa-debugsourceUpgrade libX11-debugsourceUpgrade libinput-debugsourceUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XorgUpgrade libinput-debuginfoUpgrade mesa-libEGL-develUpgrade libglvnd-opengl-debuginfoUpgrade libinput-utilsUpgrade libX11-xcbUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libGL-develUpgrade libinput-utils-debuginfoUpgrade libglvnd-glesUpgrade libglvnd-core-develUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGLUpgrade drm-utils-debuginfoUpgrade mesa-debuginfoUpgrade libwacom-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade mesa-libglapiUpgrade mesa-libglapi-debuginfoUpgrade mesa-libgbm-develUpgrade xorg-x11-server-debugsourceUpgrade mesa-libOSMesaUpgrade libdrm-develUpgrade egl-wayland-debugsourceUpgrade libdrmUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-eglUpgrade libwacom-dataUpgrade mesa-libgbmUpgrade libglvnd-egl-debuginfoUpgrade libwacomUpgrade libX11-debuginfoUpgrade egl-wayland-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade libwacom-develUpgrade mesa-libgbm-debuginfoUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-openglUpgrade libX11-commonUpgrade libinputUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-develNo solution existsUpgrade mesa-libEGL-debuginfoUpgrade mesa-vulkan-driversUpgrade libglvnd-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade egl-waylandUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-commonUpgrade libX11Upgrade libglvnd-glxUpgrade xorg-x11-driversUpgrade xorg-x11-server-develUpgrade mesa-libEGLUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-filesystemUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-sourceUpgrade mesa-dri-driversUpgrade xorg-x11-server-XephyrUpgrade libdrm-debuginfoUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinput-develUpgrade libdrm-debugsource | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade mesa-libglapiUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libdrm-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade mesa-libOSMesa-develUpgrade libglvnd-debugsourceUpgrade libinput-develUpgrade libinputUpgrade libwacom-debugsourceUpgrade mesa-libEGLUpgrade libwacom-debuginfoUpgrade libX11-xcbUpgrade mesa-libxatrackerUpgrade xorg-x11-server-develUpgrade libglvnd-egl-debuginfoUpgrade mesa-libGL-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libGLUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libX11-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-vdpau-driversUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libX11-debugsourceUpgrade egl-wayland-debugsourceUpgrade libinput-debuginfoUpgrade libwacomUpgrade libinput-utils-debuginfoUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XvfbUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-eglUpgrade mesa-libxatracker-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-XnestUpgrade mesa-libgbmUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-glesUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-debuginfoUpgrade libX11Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-core-develUpgrade libglvnd-develUpgrade mesa-vulkan-driversUpgrade libwacom-develUpgrade libdrmUpgrade libdrm-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-glxUpgrade libX11-xcb-debuginfoUpgrade mesa-filesystemUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debugsourceUpgrade libglvndUpgrade libglvnd-openglUpgrade mesa-vulkan-develUpgrade mesa-dri-driversUpgrade egl-waylandUpgrade mesa-libOSMesaUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-debuginfoUpgrade libinput-debugsourceUpgrade xorg-x11-server-XorgUpgrade mesa-debuginfoUpgrade xorg-x11-driversUpgrade libdrm-develUpgrade mesa-libgbm-develUpgrade libinput-utilsUpgrade mesa-libGL-debuginfoUpgrade egl-wayland-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xorg-x11-Xvnc | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub