A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-core-develUpgrade libglvnd-glxUpgrade libglvnd-eglUpgrade mesa-libgbm-develUpgrade libglvnd-glesUpgrade xorg-x11-server-develUpgrade libwacom-develUpgrade xorg-x11-driversUpgrade libinput-develUpgrade libglvnd-openglUpgrade xorg-x11-server-sourceUpgrade libglvndUpgrade libglvnd-develUpgrade mesa-libOSMesa-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfo | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade xorg-x11-server-XorgUpgrade egl-wayland-debugsourceUpgrade mesa-libglapiUpgrade libinput-debuginfoUpgrade libX11-debugsourceUpgrade drm-utils-debuginfoUpgrade libglvndUpgrade mesa-libOSMesaUpgrade libinput-debugsourceUpgrade mesa-debuginfoUpgrade libinput-utilsUpgrade mesa-libGLUpgrade mesa-libxatrackerUpgrade libX11-xcbUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-debugsourceUpgrade libglvnd-gles-debuginfoUpgrade mesa-libEGL-develUpgrade libinput-utils-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libwacom-dataUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libdrm-develUpgrade xorg-x11-server-XnestUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libGL-develUpgrade libinputUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-debugsourceUpgrade mesa-vdpau-driversUpgrade mesa-vulkan-develUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-driversUpgrade libglvnd-egl-debuginfoUpgrade libX11-develUpgrade libX11Upgrade libglvnd-eglUpgrade xorg-x11-server-sourceUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-driversUpgrade xorg-x11-server-develUpgrade libX11-xcb-debuginfoUpgrade libX11-commonUpgrade libwacomUpgrade libinput-test-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libEGLUpgrade libglvnd-glesUpgrade libglvnd-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-glxUpgrade libdrmUpgrade egl-wayland-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XvfbUpgrade mesa-filesystemUpgrade xorg-x11-server-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libgbmUpgrade mesa-dri-driversUpgrade libX11-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-openglUpgrade libglvnd-glx-debuginfoUpgrade egl-wayland | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xephyrUpgrade xorg-serverUpgrade xorg-dmxUpgrade xorg-vfbserverUpgrade xorg-nestserverUpgrade xwayland | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade mesa-libxatrackerUpgrade xorg-x11-server-XvfbUpgrade mesa-libglapiUpgrade libX11-develUpgrade xorg-x11-server-XwaylandUpgrade libX11-xcbUpgrade egl-waylandUpgrade mesa-libEGL-develUpgrade libwacom-dataUpgrade xorg-x11-server-sourceUpgrade mesa-vdpau-driversUpgrade libglvndUpgrade libglvnd-glxUpgrade libX11Upgrade xorg-x11-server-XephyrUpgrade mesa-dri-driversUpgrade libwacomUpgrade mesa-filesystemUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade libinput-develUpgrade libinputUpgrade libwacom-develUpgrade mesa-vulkan-develUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade libinput-utilsUpgrade libglvnd-eglUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade xorg-x11-driversUpgrade mesa-libOSMesaUpgrade libdrm-develUpgrade libdrmUpgrade libglvnd-glesUpgrade mesa-libOSMesa-develUpgrade libglvnd-core-develUpgrade mesa-libgbm-develUpgrade mesa-libGLUpgrade mesa-libEGLUpgrade mesa-libGL-develUpgrade mesa-libgbmUpgrade libX11-common | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-filesystemUpgrade mesa-libgbmUpgrade mesa-libgbm-develUpgrade libX11-commonUpgrade mesa-libEGLUpgrade mesa-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libdrm-debugsourceUpgrade libwacom-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XdmxUpgrade libglvnd-glesUpgrade libglvnd-eglNo solution existsUpgrade libwacom-debugsourceUpgrade mesa-libxatrackerUpgrade mesa-libEGL-debuginfoUpgrade mesa-libEGL-develUpgrade libinput-utilsUpgrade xorg-x11-server-XephyrUpgrade libinput-debuginfoUpgrade libX11-debugsourceUpgrade libX11-debuginfoUpgrade xorg-x11-server-develUpgrade libwacom-develUpgrade mesa-libgbm-debuginfoUpgrade mesa-libGL-develUpgrade libinputUpgrade libinput-test-debuginfoUpgrade libX11-xcbUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libGLUpgrade mesa-debugsourceUpgrade xorg-x11-server-XvfbUpgrade libinput-develUpgrade libglvnd-opengl-debuginfoUpgrade libwacomUpgrade egl-wayland-debugsourceUpgrade libdrmUpgrade xorg-x11-driversUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-commonUpgrade libglvnd-glx-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-sourceUpgrade libinput-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-glxUpgrade libwacom-dataUpgrade libX11-xcb-debuginfoUpgrade libdrm-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-libOSMesaUpgrade libglvnd-egl-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-openglUpgrade drm-utils-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11-develUpgrade libX11Upgrade libglvndUpgrade mesa-dri-driversUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade xorg-x11-server-XnestUpgrade mesa-vdpau-driversUpgrade egl-waylandUpgrade libglvnd-develUpgrade xorg-x11-server-XorgUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-vulkan-driversUpgrade libinput-utils-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libglvnd-gles-debuginfoUpgrade mesa-libEGLUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-commonUpgrade libwacom-debuginfoUpgrade libX11-xcbUpgrade libX11Upgrade libinput-utils-debuginfoUpgrade mesa-libglapiUpgrade mesa-libEGL-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade libinput-develUpgrade mesa-libEGL-develUpgrade mesa-libxatrackerUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-debugsourceUpgrade mesa-vulkan-develUpgrade libwacom-debugsourceUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libGLUpgrade mesa-libxatracker-debuginfoUpgrade libinputUpgrade libX11-debugsourceUpgrade xorg-x11-server-XorgUpgrade egl-wayland-debugsourceUpgrade mesa-vdpau-driversUpgrade libwacomUpgrade libX11-develUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-driversUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-filesystemUpgrade mesa-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade mesa-dri-driversUpgrade mesa-libgbm-develUpgrade libX11-debuginfoUpgrade libinput-debuginfoUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade libinput-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-libgbmUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-vulkan-driversUpgrade mesa-libOSMesaUpgrade libdrm-develUpgrade libinput-utilsUpgrade libglvnd-glesUpgrade libwacom-develUpgrade libglvnd-glxUpgrade libglvnd-core-develUpgrade libglvndUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-eglUpgrade egl-wayland-debuginfoUpgrade libdrmUpgrade egl-waylandUpgrade mesa-libGL-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libGL-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debugsource | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-waylandUpgrade xorg-x11-xvncUpgrade xorg-x11-server-extra | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro) | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub