A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-glxUpgrade libglvnd-eglUpgrade libglvnd-core-develUpgrade xorg-x11-server-develUpgrade mesa-libgbm-develUpgrade libglvnd-glesUpgrade libwacom-develUpgrade libinput-develUpgrade mesa-libOSMesa-develUpgrade libglvndUpgrade xorg-x11-server-sourceUpgrade xorg-x11-driversUpgrade libglvnd-develUpgrade libglvnd-opengl | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xdmx | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libdrmUpgrade xorg-x11-driversUpgrade libdrm-debugsourceUpgrade libglvnd-glxUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-openglUpgrade libwacom-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade libX11-debuginfoUpgrade mesa-dri-driversUpgrade libglvnd-egl-debuginfoUpgrade mesa-libEGLUpgrade xorg-x11-server-XdmxUpgrade libglvnd-develUpgrade libX11-xcb-debuginfoUpgrade mesa-libgbmUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-sourceUpgrade libglvnd-glesUpgrade egl-waylandUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-vulkan-driversUpgrade libX11Upgrade libwacomUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-core-develUpgrade libX11-commonUpgrade mesa-vulkan-develUpgrade xorg-x11-server-develUpgrade libglvnd-eglUpgrade libX11-develUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libdrm-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-vdpau-driversUpgrade egl-wayland-debuginfoUpgrade mesa-filesystemUpgrade mesa-libEGL-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-commonUpgrade libinput-utils-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libwacom-debuginfoUpgrade libwacom-dataUpgrade libglvnd-debuginfoUpgrade libX11-xcbUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libxatrackerUpgrade libglvnd-debugsourceUpgrade libdrm-develUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libGLUpgrade libinput-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-libglapiUpgrade libX11-debugsourceUpgrade mesa-libOSMesaUpgrade libinput-utilsUpgrade libglvndUpgrade egl-wayland-debugsourceUpgrade drm-utils-debuginfoUpgrade mesa-libEGL-develUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-debugsourceUpgrade libinputUpgrade mesa-debuginfoUpgrade libinput-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xwayland | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-nestserverUpgrade xorg-vfbserverUpgrade xwaylandUpgrade xorg-dmxUpgrade xephyrUpgrade xorg-server | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libX11-commonUpgrade xorg-x11-driversUpgrade libglvnd-eglUpgrade xorg-x11-server-develUpgrade mesa-libgbmUpgrade mesa-libEGLUpgrade mesa-libGLUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade mesa-libGL-develUpgrade mesa-libOSMesa-develUpgrade mesa-libgbm-develUpgrade libdrmUpgrade libinput-utilsUpgrade libglvnd-develUpgrade libglvnd-openglUpgrade libglvnd-glesUpgrade mesa-libOSMesaUpgrade libX11-develUpgrade mesa-vdpau-driversUpgrade libglvndUpgrade xorg-x11-server-XephyrUpgrade libwacomUpgrade libX11Upgrade xorg-x11-server-sourceUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XorgUpgrade libwacom-develUpgrade libinputUpgrade xorg-x11-server-XnestUpgrade mesa-libglapiUpgrade xorg-x11-server-XwaylandUpgrade libX11-xcbUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-develUpgrade mesa-vulkan-driversUpgrade libwacom-dataUpgrade mesa-dri-driversUpgrade libglvnd-glxUpgrade egl-waylandUpgrade xorg-x11-server-XdmxUpgrade libinput-develUpgrade mesa-filesystemUpgrade mesa-libxatrackerUpgrade xorg-x11-server-Xvfb | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade libwacom-dataUpgrade egl-wayland-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-server-sourceUpgrade libglvnd-egl-debuginfoUpgrade libdrmUpgrade xorg-x11-driversUpgrade libX11-xcb-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-libOSMesaUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libinput-debugsourceUpgrade libglvnd-openglUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade libinput-utils-debuginfoUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-XorgUpgrade libglvnd-glxUpgrade libglvnd-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade libdrm-develUpgrade mesa-vulkan-driversUpgrade mesa-libOSMesa-debuginfoUpgrade drm-utils-debuginfoUpgrade libglvnd-core-develUpgrade libglvnd-gles-debuginfoUpgrade egl-waylandUpgrade libX11-develUpgrade libglvndUpgrade mesa-dri-driversUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libX11Upgrade mesa-vdpau-driversUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-filesystemUpgrade libinput-utilsUpgrade libwacom-develNo solution existsUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libgbm-develUpgrade mesa-debugsourceUpgrade mesa-libGLUpgrade xorg-x11-server-XephyrUpgrade libglvnd-eglUpgrade mesa-libEGLUpgrade mesa-debuginfoUpgrade mesa-libgbmUpgrade libX11-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libX11-commonUpgrade libwacom-debugsourceUpgrade libX11-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libinputUpgrade mesa-libxatrackerUpgrade xorg-x11-server-develUpgrade mesa-libgbm-debuginfoUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libglapiUpgrade libglvnd-debuginfoUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-develUpgrade libX11-xcbUpgrade mesa-libOSMesa-develUpgrade libwacomUpgrade libglvnd-glesUpgrade mesa-vdpau-drivers-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XvfbUpgrade mesa-libEGL-develUpgrade libinput-debuginfoUpgrade mesa-libGL-develUpgrade libglvnd-debugsource | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libOSMesa-develUpgrade libdrm-debuginfoUpgrade libX11-debuginfoUpgrade mesa-dri-driversUpgrade mesa-libGL-debuginfoUpgrade libglvnd-glxUpgrade libglvndUpgrade mesa-filesystemUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-vulkan-driversUpgrade libwacom-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade egl-wayland-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libinput-utilsUpgrade libglvnd-develUpgrade libinput-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-driversUpgrade libdrm-develUpgrade mesa-debuginfoUpgrade libglvnd-openglUpgrade xorg-x11-server-XwaylandUpgrade mesa-libGL-develUpgrade egl-waylandUpgrade mesa-libgbmUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-core-develUpgrade libdrmUpgrade xorg-x11-server-debuginfoUpgrade mesa-libgbm-develUpgrade libinput-debugsourceUpgrade mesa-libOSMesaUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XorgUpgrade egl-wayland-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade libX11-debugsourceUpgrade xorg-x11-server-XvfbUpgrade libX11-develUpgrade xorg-x11-server-commonUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XnestUpgrade libinput-utils-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libwacom-debuginfoUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libX11Upgrade mesa-vulkan-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libglapiUpgrade libdrm-debugsourceUpgrade libwacom-debugsourceUpgrade libwacomUpgrade mesa-libGLUpgrade mesa-debugsourceUpgrade mesa-libxatrackerUpgrade mesa-libEGL-develUpgrade xorg-x11-server-develUpgrade libinput-develUpgrade libglvnd-opengl-debuginfoUpgrade libinputUpgrade mesa-libgbm-debuginfoUpgrade libX11-xcbUpgrade libglvnd-egl-debuginfoUpgrade mesa-libEGLUpgrade libglvnd-gles-debuginfo | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-xvnc | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub