A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-glesUpgrade xorg-x11-server-develUpgrade libglvnd-glxUpgrade libglvnd-eglUpgrade mesa-libgbm-develUpgrade libglvnd-core-develUpgrade libwacom-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-driversUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade mesa-libOSMesa-develUpgrade libglvndUpgrade libinput-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debuginfo | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade mesa-libGL-develUpgrade libinputUpgrade libglvnd-debugsourceUpgrade mesa-libxatrackerUpgrade mesa-libEGL-develUpgrade mesa-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XnestUpgrade libinput-debugsourceUpgrade libdrm-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libX11-debugsourceUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libX11-xcbUpgrade libglvndUpgrade libglvnd-gles-debuginfoUpgrade libinput-utilsUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libwacom-dataUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libinput-debuginfoUpgrade mesa-libGLUpgrade mesa-libOSMesaUpgrade xorg-x11-server-XorgUpgrade mesa-libglapiUpgrade mesa-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-commonUpgrade egl-wayland-debugsourceUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade libdrmUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-driversUpgrade libglvnd-core-develUpgrade libglvnd-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libEGLUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-driversUpgrade libdrm-debugsourceUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-glesUpgrade mesa-vulkan-develUpgrade libdrm-debuginfoUpgrade mesa-filesystemUpgrade xorg-x11-server-sourceUpgrade mesa-vdpau-driversUpgrade mesa-libgbm-debuginfoUpgrade libX11-develUpgrade libX11Upgrade libglvnd-egl-debuginfoUpgrade libglvnd-eglUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-glxUpgrade libX11-xcb-debuginfoUpgrade libX11-commonUpgrade libinput-test-debuginfoUpgrade libwacomUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libgbmUpgrade mesa-dri-driversUpgrade libX11-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-openglUpgrade libglvnd-glx-debuginfoUpgrade egl-wayland | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-serverUpgrade xephyrUpgrade xorg-vfbserverUpgrade xorg-dmxUpgrade xwaylandUpgrade xorg-nestserver | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade mesa-libEGLUpgrade xorg-x11-driversUpgrade libglvnd-eglUpgrade mesa-libGLUpgrade libdrm-develUpgrade libdrmUpgrade libglvnd-core-develUpgrade mesa-libgbm-develUpgrade libinput-utilsUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade mesa-libOSMesaUpgrade mesa-libOSMesa-develUpgrade mesa-libGL-develUpgrade mesa-libgbmUpgrade libX11-commonUpgrade xorg-x11-server-develUpgrade libglvnd-glesUpgrade libglvndUpgrade mesa-vdpau-driversUpgrade mesa-dri-driversUpgrade mesa-filesystemUpgrade libX11-xcbUpgrade mesa-libEGL-develUpgrade libwacom-dataUpgrade xorg-x11-server-XorgUpgrade libinputUpgrade libwacom-develUpgrade xorg-x11-server-sourceUpgrade libwacomUpgrade egl-waylandUpgrade libglvnd-glxUpgrade libX11-develUpgrade xorg-x11-server-XephyrUpgrade libX11Upgrade xorg-x11-server-commonUpgrade mesa-libglapiUpgrade xorg-x11-server-XvfbUpgrade mesa-libxatrackerUpgrade mesa-vulkan-develUpgrade xorg-x11-server-XdmxUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XwaylandUpgrade libinput-develUpgrade xorg-x11-server-Xnest | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-libgbmUpgrade libX11-debuginfoUpgrade libglvnd-glesUpgrade libinput-debuginfoUpgrade libX11-debugsourceUpgrade mesa-libOSMesa-develUpgrade libdrm-debugsourceUpgrade xorg-x11-server-develUpgrade libglvnd-eglUpgrade libwacomUpgrade libinput-test-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libwacom-develUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libinputUpgrade libglvnd-debuginfoUpgrade mesa-libgbm-develUpgrade mesa-libEGLNo solution existsUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libEGL-develUpgrade mesa-libglapiUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libOSMesaUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade mesa-vulkan-driversUpgrade libglvnd-openglUpgrade mesa-vulkan-develUpgrade libglvnd-develUpgrade mesa-vdpau-driversUpgrade libX11-xcb-debuginfoUpgrade libwacom-dataUpgrade libglvnd-glxUpgrade libglvnd-core-develUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade egl-waylandUpgrade xorg-x11-server-XnestUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-dri-driversUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libglvndUpgrade libX11Upgrade libX11-develUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-driversUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libdrmUpgrade libinput-debugsourceUpgrade xorg-x11-server-sourceUpgrade libdrm-develUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade egl-wayland-debugsourceUpgrade libdrm-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libGL-debuginfoUpgrade mesa-debugsourceUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGL-debuginfoUpgrade mesa-libGLUpgrade libinput-develUpgrade mesa-libGL-develUpgrade libglvnd-debugsourceUpgrade libinput-utilsUpgrade mesa-libxatrackerUpgrade mesa-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade libX11-commonUpgrade mesa-filesystemUpgrade libwacom-debugsourceUpgrade libX11-xcbUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-Xdmx | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade mesa-filesystemUpgrade libglvnd-glxUpgrade egl-waylandUpgrade xorg-x11-server-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libOSMesa-develUpgrade libinput-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-vulkan-driversUpgrade libglvnd-openglUpgrade xorg-x11-driversUpgrade libX11-debuginfoUpgrade libwacom-develUpgrade mesa-libgbmUpgrade libinput-utilsUpgrade libglvndUpgrade mesa-libGL-debuginfoUpgrade mesa-libgbm-develUpgrade libinput-debugsourceUpgrade mesa-debuginfoUpgrade mesa-libOSMesaUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-eglUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libdrm-develUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-dri-driversUpgrade libdrmUpgrade libdrm-debuginfoUpgrade egl-wayland-debuginfoUpgrade libglvnd-glesUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade mesa-vulkan-develUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGLUpgrade mesa-debugsourceUpgrade libwacom-debugsourceUpgrade libwacomUpgrade mesa-libgbm-debuginfoUpgrade libX11-develUpgrade libX11-debugsourceUpgrade libinput-utils-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libglapiUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-vdpau-drivers-debuginfoUpgrade libX11-xcbUpgrade libinput-develUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade mesa-libxatrackerUpgrade mesa-libEGL-develUpgrade libinputUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libEGLUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade libglvnd-gles-debuginfoUpgrade mesa-vdpau-driversUpgrade libX11 | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-XvncUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-source | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub