A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-openglUpgrade libwacom-develUpgrade libinput-develUpgrade libglvnd-develUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-driversUpgrade libglvndUpgrade libglvnd-core-develUpgrade libglvnd-glesUpgrade libglvnd-eglUpgrade xorg-x11-server-develUpgrade libglvnd-glxUpgrade mesa-libgbm-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfo | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libglvnd-openglUpgrade mesa-vulkan-develUpgrade libdrm-debuginfoUpgrade libwacomUpgrade libinput-test-debuginfoUpgrade libglvnd-glesUpgrade libX11-commonUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-filesystemUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-server-develUpgrade mesa-libEGL-debuginfoUpgrade mesa-vulkan-driversUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-server-sourceUpgrade libglvnd-eglUpgrade mesa-vdpau-driversUpgrade mesa-vulkan-drivers-debuginfoUpgrade egl-wayland-debuginfoUpgrade libX11-develUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade egl-waylandUpgrade libX11Upgrade libglvnd-develUpgrade mesa-libEGLUpgrade xorg-x11-server-XdmxUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-glxUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-driversUpgrade libwacom-debugsourceUpgrade libdrm-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libdrmUpgrade libX11-debuginfoUpgrade mesa-dri-driversUpgrade mesa-libgbmUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libxatrackerUpgrade libinputUpgrade libwacom-dataUpgrade libglvnd-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-debugsourceUpgrade libdrm-develUpgrade xorg-x11-server-XnestUpgrade libX11-xcbUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libGL-develUpgrade libinput-utils-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libOSMesaUpgrade libinput-utilsUpgrade libglvndUpgrade xorg-x11-server-XorgUpgrade mesa-libglapiUpgrade libX11-debugsourceUpgrade egl-wayland-debugsourceUpgrade mesa-libGLUpgrade mesa-libEGL-develUpgrade libglvnd-gles-debuginfoUpgrade drm-utils-debuginfoUpgrade mesa-debuginfoUpgrade libinput-debugsource | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xephyrUpgrade xorg-serverUpgrade xwaylandUpgrade xorg-dmxUpgrade xorg-nestserverUpgrade xorg-vfbserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade mesa-libxatrackerUpgrade libinputUpgrade libwacom-develUpgrade mesa-filesystemUpgrade mesa-libEGL-develUpgrade libwacomUpgrade mesa-vdpau-driversUpgrade libX11Upgrade libglvndUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade mesa-libglapiUpgrade xorg-x11-server-XnestUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XorgUpgrade mesa-vulkan-driversUpgrade libX11-develUpgrade libwacom-dataUpgrade libX11-xcbUpgrade xorg-x11-server-commonUpgrade libinput-develUpgrade xorg-x11-server-XdmxUpgrade mesa-dri-driversUpgrade egl-waylandUpgrade libglvnd-glxUpgrade mesa-libGLUpgrade mesa-libOSMesaUpgrade xorg-x11-driversUpgrade mesa-libgbmUpgrade libdrmUpgrade xorg-x11-server-develUpgrade mesa-libOSMesa-develUpgrade mesa-libGL-develUpgrade libinput-utilsUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade libglvnd-core-develUpgrade mesa-libgbm-develUpgrade mesa-libEGLUpgrade libX11-commonUpgrade libglvnd-eglUpgrade libglvnd-glesUpgrade libdrm-devel | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-debuginfoUpgrade libglvnd-debugsourceUpgrade libinput-utilsUpgrade libX11-debugsourceUpgrade mesa-libgbmUpgrade libinputUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libglapiUpgrade libdrm-debugsourceUpgrade libwacom-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libgbm-develUpgrade libwacom-debuginfoUpgrade mesa-libxatrackerUpgrade mesa-filesystemUpgrade libX11-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-debuginfoUpgrade libwacomUpgrade libinput-test-debuginfoNo solution existsUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-xcbUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libinput-debugsourceUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XorgUpgrade libglvnd-openglUpgrade xorg-x11-server-debugsourceUpgrade mesa-libOSMesaUpgrade egl-wayland-debuginfoUpgrade mesa-vulkan-develUpgrade egl-wayland-debugsourceUpgrade mesa-dri-driversUpgrade libglvnd-gles-debuginfoUpgrade drm-utils-debuginfoUpgrade libX11-develUpgrade libX11Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-driversUpgrade libglvndUpgrade xorg-x11-server-sourceUpgrade mesa-libGL-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-glxUpgrade libX11-xcb-debuginfoUpgrade libwacom-dataUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XnestUpgrade libglvnd-egl-debuginfoUpgrade libdrm-debuginfoUpgrade libdrmUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade egl-waylandUpgrade libinput-utils-debuginfoUpgrade libglvnd-develUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-debuginfoUpgrade libdrm-develUpgrade libwacom-debugsourceUpgrade libglvnd-eglUpgrade libinput-develUpgrade xorg-x11-server-XdmxUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libGLUpgrade mesa-libEGLUpgrade mesa-libOSMesa-develUpgrade libX11-commonUpgrade mesa-libGL-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGL-develUpgrade xorg-x11-server-develUpgrade libinput-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-debugsourceUpgrade libglvnd-gles | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libinput-develUpgrade mesa-libxatrackerUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade libinput-utils-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libEGL-develUpgrade libinputUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-vulkan-develUpgrade libglvnd-glx-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-XdmxUpgrade mesa-libEGL-debuginfoUpgrade mesa-vdpau-driversUpgrade mesa-libglapiUpgrade mesa-libEGLUpgrade xorg-x11-server-XorgUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-XephyrUpgrade libX11-xcbUpgrade xorg-x11-server-XvfbUpgrade libX11-develUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libGLUpgrade libwacomUpgrade xorg-x11-server-commonUpgrade libwacom-debugsourceUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libwacom-debuginfoUpgrade libX11Upgrade mesa-libglapi-debuginfoUpgrade mesa-libgbm-develUpgrade libglvnd-eglUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-core-develUpgrade mesa-vulkan-driversUpgrade libinput-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libglvnd-glesUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade mesa-libgbmUpgrade mesa-filesystemUpgrade egl-waylandUpgrade mesa-libGL-develUpgrade mesa-dri-driversUpgrade libdrm-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libdrmUpgrade xorg-x11-server-debugsourceUpgrade mesa-libOSMesaUpgrade mesa-debuginfoUpgrade libinput-utilsUpgrade libdrm-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-driversUpgrade mesa-libOSMesa-develUpgrade libX11-debuginfoUpgrade libinput-debuginfoUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-libGL-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libwacom-develUpgrade libglvnd-glxUpgrade libglvnd | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-extraUpgrade xorg-x11-Xvnc | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub