A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-glxUpgrade libglvnd-glesUpgrade libglvnd-eglUpgrade mesa-libgbm-develUpgrade xorg-x11-server-develUpgrade libglvnd-core-develUpgrade xorg-x11-driversUpgrade mesa-libOSMesa-develUpgrade libinput-develUpgrade libwacom-develUpgrade xorg-x11-server-sourceUpgrade libglvnd-develUpgrade libglvnd-openglUpgrade libglvnd | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-devel | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade libinputUpgrade mesa-libxatrackerUpgrade libwacom-debuginfoUpgrade libglvnd-debuginfoUpgrade libdrm-develUpgrade libglvndUpgrade libinput-utilsUpgrade libglvnd-gles-debuginfoUpgrade libX11-xcbUpgrade mesa-libOSMesaUpgrade mesa-libEGL-develUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-commonUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libwacom-dataUpgrade mesa-libGL-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libinput-utils-debuginfoUpgrade drm-utils-debuginfoUpgrade libinput-debugsourceUpgrade mesa-debugsourceUpgrade libinput-debuginfoUpgrade libX11-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-debuginfoUpgrade mesa-libGL-develUpgrade xorg-x11-server-debugsourceUpgrade mesa-libGLUpgrade xorg-x11-server-XorgUpgrade libglvnd-debugsourceUpgrade mesa-libglapiUpgrade mesa-libgbmUpgrade mesa-vulkan-driversUpgrade libdrmUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-dri-driversUpgrade libX11-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-openglUpgrade egl-waylandUpgrade xorg-x11-server-XephyrUpgrade libglvnd-core-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-eglUpgrade xorg-x11-server-sourceUpgrade mesa-libgbm-debuginfoUpgrade libX11-develUpgrade libX11Upgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-filesystemUpgrade libglvnd-glesUpgrade libdrm-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-driversUpgrade libglvnd-glxUpgrade mesa-libEGLUpgrade xorg-x11-server-develUpgrade mesa-vulkan-develUpgrade libX11-xcb-debuginfoUpgrade libX11-commonUpgrade libwacomUpgrade libinput-test-debuginfoUpgrade libglvnd-develUpgrade mesa-vdpau-driversUpgrade libglvnd-egl-debuginfoUpgrade egl-wayland-debuginfoUpgrade mesa-dri-drivers-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-serverUpgrade xephyrUpgrade xorg-nestserverUpgrade xwaylandUpgrade xorg-vfbserverUpgrade xorg-dmx | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libwacom-develUpgrade xorg-x11-server-XorgUpgrade libX11Upgrade mesa-libglapiUpgrade xorg-x11-server-XnestUpgrade libX11-develUpgrade xorg-x11-server-XwaylandUpgrade libinputUpgrade mesa-vdpau-driversUpgrade libwacomUpgrade mesa-libEGL-develUpgrade mesa-dri-driversUpgrade mesa-filesystemUpgrade xorg-x11-server-sourceUpgrade libglvndUpgrade egl-waylandUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade libinput-develUpgrade xorg-x11-server-XvfbUpgrade mesa-vulkan-develUpgrade libX11-xcbUpgrade libglvnd-glxUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XephyrUpgrade libwacom-dataUpgrade libinput-utilsUpgrade mesa-libGL-develUpgrade mesa-libEGLUpgrade libglvnd-eglUpgrade mesa-libGLUpgrade libdrmUpgrade libglvnd-glesUpgrade mesa-libOSMesa-develUpgrade libdrm-develUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade libglvnd-core-develUpgrade mesa-libgbm-develUpgrade xorg-x11-server-develUpgrade mesa-libOSMesaUpgrade xorg-x11-driversUpgrade mesa-libgbmUpgrade libX11-common | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade mesa-libEGL-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-debuginfoUpgrade libwacom-debugsourceUpgrade xorg-x11-server-XdmxUpgrade libinput-test-debuginfoUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-debuginfoUpgrade libglvnd-eglUpgrade libglvnd-debugsourceUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libEGLUpgrade mesa-libxatrackerNo solution existsUpgrade mesa-libgbm-debuginfoUpgrade libwacom-debuginfoUpgrade libinputUpgrade mesa-libgbmUpgrade xorg-x11-server-develUpgrade libX11-xcbUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-debuginfoUpgrade mesa-debuginfoUpgrade libinput-utilsUpgrade libglvnd-glesUpgrade libwacomUpgrade libwacom-develUpgrade mesa-libGL-develUpgrade libdrm-debugsourceUpgrade mesa-debugsourceUpgrade libinput-develUpgrade mesa-libEGL-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libX11-commonUpgrade mesa-filesystemUpgrade xorg-x11-server-XephyrUpgrade mesa-libGLUpgrade libX11-debugsourceUpgrade mesa-libgbm-develUpgrade mesa-libglapiUpgrade mesa-vdpau-drivers-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-commonUpgrade libglvnd-openglUpgrade libglvndUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libX11Upgrade xorg-x11-server-XnestUpgrade libinput-debugsourceUpgrade mesa-dri-driversUpgrade mesa-libOSMesa-debuginfoUpgrade libinput-utils-debuginfoUpgrade libglvnd-glxUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade libX11-develUpgrade egl-waylandUpgrade mesa-libGL-debuginfoUpgrade libdrm-develUpgrade drm-utils-debuginfoUpgrade mesa-vdpau-driversUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-sourceUpgrade libwacom-dataUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libOSMesaUpgrade egl-wayland-debugsourceUpgrade xorg-x11-driversUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libdrm-debuginfoUpgrade libdrmUpgrade libglvnd-core-develUpgrade mesa-vulkan-develUpgrade libglvnd-develUpgrade mesa-vulkan-drivers | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libglvnd-glx-debuginfoUpgrade libX11-debugsourceUpgrade egl-wayland-debugsourceUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XorgUpgrade mesa-libOSMesa-debuginfoUpgrade libinput-utils-debuginfoUpgrade libX11-xcbUpgrade libX11-develUpgrade mesa-libEGLUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-commonUpgrade libglvnd-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-libglapiUpgrade mesa-libEGL-debuginfoUpgrade mesa-debugsourceUpgrade libX11Upgrade libinputUpgrade xorg-x11-server-XephyrUpgrade libglvnd-debugsourceUpgrade mesa-libGLUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XdmxUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libwacomUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libEGL-develUpgrade mesa-vulkan-develUpgrade libinput-develUpgrade xorg-x11-server-XnestUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libxatrackerUpgrade xorg-x11-server-develUpgrade libdrm-debugsourceUpgrade libwacom-debuginfoUpgrade libinput-utilsUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade libinput-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade mesa-libOSMesaUpgrade mesa-debuginfoUpgrade libwacom-develUpgrade libglvnd-core-develUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvnd-glxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-dri-driversUpgrade libdrm-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libdrmUpgrade egl-waylandUpgrade libinput-debuginfoUpgrade mesa-libOSMesa-develUpgrade libX11-debuginfoUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade mesa-libgbm-develUpgrade mesa-libGL-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-vulkan-driversUpgrade mesa-filesystemUpgrade egl-wayland-debuginfoUpgrade libglvnd-glesUpgrade xorg-x11-driversUpgrade libglvnd-eglUpgrade mesa-libgbmUpgrade libX11-xcb-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libdrm-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libglvnd | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-serverUpgrade xorg-x11-XvncUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-wayland | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub