A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvndUpgrade xorg-x11-driversUpgrade libwacom-develUpgrade xorg-x11-server-sourceUpgrade libglvnd-openglUpgrade libinput-develUpgrade libglvnd-develUpgrade mesa-libOSMesa-develUpgrade libglvnd-eglUpgrade mesa-libgbm-develUpgrade libglvnd-glesUpgrade libglvnd-glxUpgrade libglvnd-core-develUpgrade xorg-x11-server-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-source | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libglvnd-develUpgrade mesa-vdpau-driversUpgrade xorg-x11-driversUpgrade libX11-develUpgrade xorg-x11-server-sourceUpgrade libglvnd-eglUpgrade mesa-libgbm-debuginfoUpgrade mesa-libEGLUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-glxUpgrade mesa-dri-driversUpgrade libX11-xcb-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-develUpgrade libdrmUpgrade xorg-x11-server-XdmxUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-glesUpgrade libdrm-debugsourceUpgrade libwacomUpgrade mesa-libOSMesa-debuginfoUpgrade libX11-commonUpgrade libglvnd-egl-debuginfoUpgrade libdrm-debuginfoUpgrade libinput-test-debuginfoUpgrade libglvnd-openglUpgrade libX11Upgrade mesa-libEGL-debuginfoUpgrade libwacom-debugsourceUpgrade libX11-debuginfoUpgrade mesa-libgbmUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-filesystemUpgrade mesa-vulkan-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade egl-waylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-core-develUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XnestUpgrade libdrm-develUpgrade libwacom-dataUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libwacom-debuginfoUpgrade libinputUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libGL-develUpgrade mesa-libxatrackerUpgrade drm-utils-debuginfoUpgrade mesa-debuginfoUpgrade libinput-debugsourceUpgrade mesa-libEGL-develUpgrade mesa-libOSMesaUpgrade libinput-utilsUpgrade libglvndUpgrade libX11-debugsourceUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-XorgUpgrade libinput-debuginfoUpgrade mesa-libGLUpgrade mesa-libglapiUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade mesa-libglapi-debuginfoUpgrade libinput-utils-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libX11-xcbUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-debugsource | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-serverUpgrade xephyrUpgrade xorg-dmxUpgrade xorg-vfbserverUpgrade xorg-nestserverUpgrade xwayland | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libglvnd-eglUpgrade libinput-utilsUpgrade libglvnd-openglUpgrade xorg-x11-server-develUpgrade libglvnd-glesUpgrade libX11-commonUpgrade mesa-libOSMesaUpgrade mesa-libgbm-develUpgrade mesa-libgbmUpgrade mesa-libGL-develUpgrade mesa-libEGLUpgrade mesa-libOSMesa-develUpgrade libdrmUpgrade mesa-libGLUpgrade libdrm-develUpgrade libglvnd-core-develUpgrade libglvnd-develUpgrade xorg-x11-driversUpgrade mesa-libglapiUpgrade mesa-dri-driversUpgrade libX11-xcbUpgrade libX11-develUpgrade libwacom-dataUpgrade libglvnd-glxUpgrade egl-waylandUpgrade libwacom-develUpgrade libinputUpgrade xorg-x11-server-XorgUpgrade mesa-vdpau-driversUpgrade mesa-libEGL-develUpgrade mesa-filesystemUpgrade libwacomUpgrade libglvndUpgrade xorg-x11-server-sourceUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-driversUpgrade mesa-libxatrackerUpgrade libX11Upgrade xorg-x11-server-commonUpgrade libinput-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xnest | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-libOSMesa-develUpgrade mesa-libEGL-develUpgrade libdrm-debugsourceUpgrade libinput-test-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libgbm-debuginfoNo solution existsUpgrade libinput-debuginfoUpgrade libglvnd-glesUpgrade libX11-xcbUpgrade mesa-libEGLUpgrade mesa-filesystemUpgrade xorg-x11-server-XephyrUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-eglUpgrade libwacomUpgrade libwacom-debugsourceUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-debugsourceUpgrade libwacom-develUpgrade xorg-x11-server-develUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libgbmUpgrade mesa-libglapiUpgrade mesa-libgbm-develUpgrade libX11-debugsourceUpgrade libinput-utilsUpgrade libglvnd-opengl-debuginfoUpgrade libinputUpgrade mesa-debuginfoUpgrade mesa-libxatrackerUpgrade libX11-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libwacom-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libGLUpgrade libX11-commonUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinput-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libdrm-develUpgrade drm-utils-debuginfoUpgrade libwacom-dataUpgrade xorg-x11-server-XorgUpgrade libglvndUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libX11Upgrade libinput-debugsourceUpgrade mesa-vdpau-driversUpgrade libglvnd-develUpgrade libglvnd-core-develUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade libX11-develUpgrade egl-wayland-debugsourceUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-driversUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XnestUpgrade egl-waylandUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libdrmUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-glxUpgrade mesa-dri-driversUpgrade libinput-utils-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-vulkan-driversUpgrade egl-wayland-debuginfoUpgrade mesa-libOSMesaUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-develUpgrade libglvnd-openglUpgrade libX11-xcb-debuginfoUpgrade libdrm-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-eglUpgrade libinput-debugsourceUpgrade libglvnd-glesUpgrade mesa-libgbmUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade egl-wayland-debuginfoUpgrade libdrmUpgrade libX11-xcb-debuginfoUpgrade egl-waylandUpgrade mesa-filesystemUpgrade mesa-libGL-debuginfoUpgrade mesa-dri-driversUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade mesa-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libOSMesa-develUpgrade mesa-libgbm-develUpgrade mesa-libOSMesaUpgrade libdrm-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-openglUpgrade mesa-libGL-develUpgrade libX11-debuginfoUpgrade xorg-x11-driversUpgrade libinput-utilsUpgrade libglvnd-core-develUpgrade libglvnd-glxUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libwacom-develUpgrade libglvndUpgrade libinput-debuginfoUpgrade libglvnd-develUpgrade mesa-vulkan-driversUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-XvfbUpgrade egl-wayland-debugsourceUpgrade mesa-vulkan-develUpgrade libX11-debugsourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libX11-develUpgrade libX11-xcbUpgrade xorg-x11-server-XorgUpgrade mesa-vdpau-driversUpgrade libinput-utils-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-libEGLUpgrade libglvnd-gles-debuginfoUpgrade mesa-debugsourceUpgrade libwacom-debugsourceUpgrade libwacomUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGLUpgrade xorg-x11-server-commonUpgrade libX11Upgrade libwacom-debuginfoUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libglapiUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libinput-develUpgrade libglvnd-opengl-debuginfoUpgrade libinputUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade mesa-libEGL-develUpgrade libdrm-debugsourceUpgrade mesa-libxatracker | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-xvncUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-wayland | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub