A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libglvnd-develUpgrade libglvnd-eglUpgrade xorg-x11-server-develUpgrade libglvnd-core-develUpgrade libglvnd-glxUpgrade mesa-libgbm-develUpgrade libglvnd-glesUpgrade xorg-x11-server-sourceUpgrade libglvndUpgrade libglvnd-openglUpgrade libwacom-develUpgrade mesa-libOSMesa-develUpgrade libinput-develUpgrade xorg-x11-drivers | May 4, 2022 | Dec 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Aug 22, 2024 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr | Jan 27, 2021 | Dec 15, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 15, 2020 |
| Centos_linux | — | Upgrade libX11-debuginfoUpgrade libglvnd-core-develUpgrade mesa-libEGLUpgrade mesa-libGL-develUpgrade libglvnd-glesUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade egl-wayland-debuginfoUpgrade libglvnd-develUpgrade xorg-x11-server-XdmxUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade libwacom-debugsourceUpgrade libX11-commonUpgrade mesa-vdpau-driversUpgrade mesa-dri-drivers-debuginfoUpgrade libdrm-develUpgrade drm-utils-debuginfoUpgrade egl-waylandUpgrade libdrmUpgrade libdrm-debuginfoUpgrade libglvnd-eglUpgrade libinput-test-debuginfoUpgrade mesa-dri-driversUpgrade libinput-utilsUpgrade libinput-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libglvnd-openglUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvnd-debugsourceUpgrade libinputUpgrade mesa-filesystemUpgrade libwacomUpgrade libdrm-debugsourceUpgrade xorg-x11-driversUpgrade mesa-libgbmUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade mesa-libglapiUpgrade mesa-libOSMesaUpgrade egl-wayland-debugsourceUpgrade libwacom-dataUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade mesa-libGLUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libX11-debugsourceUpgrade libwacom-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade mesa-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade mesa-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade mesa-libEGL-develUpgrade libglvnd-glxUpgrade libglvndUpgrade libinput-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-develUpgrade libX11-xcbUpgrade libX11-develUpgrade mesa-libgbm-debuginfoUpgrade libX11Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-Xorg | Dec 15, 2020 | Dec 14, 2020 |
| Debian | — | Upgrade xorg-server | Dec 7, 2020 | Dec 7, 2020 |
| Freebsd | — | Upgrade xorg-nestserverUpgrade xorg-dmxUpgrade xwaylandUpgrade xorg-serverUpgrade xephyrUpgrade xorg-vfbserver | Dec 2, 2020 | Dec 1, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Dec 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Feb 22, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Feb 3, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Feb 2, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Jan 5, 2021 | Dec 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xephyr to version 1.20.8-11.4.30.0.1.88.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.30.0.1.88.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.30.0.1.88.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.30.0.1.88.0 on Solaris 11.4Upgrade x11/server/xvnc to version 1.10.1-11.4.30.0.1.88.0 on Solaris 11.4 | Feb 17, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade libwacomUpgrade xorg-x11-server-sourceUpgrade egl-waylandUpgrade mesa-libEGLUpgrade libinputUpgrade libwacom-dataUpgrade xorg-x11-server-XnestUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade mesa-filesystemUpgrade libX11-develUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XvfbUpgrade libinput-develUpgrade xorg-x11-server-commonUpgrade libX11-xcbUpgrade libX11Upgrade libglvnd-glxUpgrade mesa-vulkan-develUpgrade mesa-dri-driversUpgrade xorg-x11-server-XorgUpgrade libwacom-develUpgrade mesa-libGLUpgrade xorg-x11-server-XdmxUpgrade libinput-utilsUpgrade xorg-x11-driversUpgrade mesa-libgbm-develUpgrade mesa-libgbmUpgrade libglvnd-develUpgrade libglvnd-eglUpgrade mesa-libglapiUpgrade mesa-vulkan-driversUpgrade libglvnd-core-develUpgrade libglvndUpgrade mesa-libOSMesa-develUpgrade mesa-libEGL-develUpgrade mesa-libOSMesaUpgrade libdrm-develUpgrade libX11-commonUpgrade libglvnd-glesUpgrade libdrmUpgrade libglvnd-openglUpgrade mesa-libGL-devel | Dec 15, 2020 | Dec 1, 2020 |
| Redhat_linux | — | Upgrade mesa-debuginfoUpgrade mesa-libxatracker-debuginfoNo solution existsUpgrade libglvnd-eglUpgrade libglvnd-develUpgrade libglvnd-gles-debuginfoUpgrade mesa-libGLUpgrade libwacom-debuginfoUpgrade libglvnd-core-develUpgrade mesa-libglapiUpgrade libglvnd-glesUpgrade xorg-x11-server-debugsourceUpgrade libinput-debuginfoUpgrade drm-utils-debuginfoUpgrade libwacom-debugsourceUpgrade libglvnd-openglUpgrade mesa-libGL-develUpgrade libinput-utils-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libdrm-debugsourceUpgrade libglvndUpgrade libglvnd-opengl-debuginfoUpgrade libinput-debugsourceUpgrade mesa-libOSMesa-develUpgrade mesa-libgbmUpgrade xorg-x11-server-XdmxUpgrade mesa-libEGL-develUpgrade mesa-libGL-debuginfoUpgrade libdrm-develUpgrade mesa-libgbm-develUpgrade libX11-commonUpgrade libinput-utilsUpgrade xorg-x11-server-debuginfoUpgrade mesa-vulkan-driversUpgrade libdrmUpgrade mesa-libOSMesaUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libdrm-debuginfoUpgrade xorg-x11-driversUpgrade xorg-x11-server-Xnest-debuginfoUpgrade egl-wayland-debugsourceUpgrade libX11-xcb-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-develUpgrade egl-waylandUpgrade libinputUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libinput-develUpgrade mesa-libgbm-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade libglvnd-glxUpgrade libX11-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade egl-wayland-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-dri-driversUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade libwacom-dataUpgrade libwacom-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-vdpau-driversUpgrade libinput-test-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGLUpgrade libX11-debuginfoUpgrade libwacomUpgrade mesa-libxatrackerUpgrade mesa-vulkan-develUpgrade mesa-filesystemUpgrade libX11Upgrade libX11-xcbUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-debugsource | Dec 15, 2020 | Dec 14, 2020 |
| Rocky_linux | — | Upgrade libglvnd-glxUpgrade xorg-x11-driversUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XorgUpgrade libwacomUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libwacom-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-libxatrackerUpgrade libX11Upgrade xorg-x11-server-XdmxUpgrade mesa-vdpau-driversUpgrade xorg-x11-server-XnestUpgrade mesa-vulkan-driversUpgrade mesa-filesystemUpgrade libinput-debugsourceUpgrade mesa-vulkan-develUpgrade libdrm-develUpgrade libX11-debugsourceUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-commonUpgrade mesa-libOSMesaUpgrade mesa-debugsourceUpgrade mesa-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade xorg-x11-server-XephyrUpgrade libX11-debuginfoUpgrade libdrmUpgrade libglvndUpgrade libglvnd-openglUpgrade libglvnd-glesUpgrade libinput-utils-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-libgbmUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libdrm-debuginfoUpgrade egl-wayland-debugsourceUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libwacom-debugsourceUpgrade mesa-libGLUpgrade mesa-libGL-debuginfoUpgrade libinput-develUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-server-develUpgrade mesa-libOSMesa-develUpgrade mesa-libgbm-develUpgrade libX11-xcb-debuginfoUpgrade mesa-dri-driversUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-develUpgrade libglvnd-debugsourceUpgrade egl-waylandUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-eglUpgrade mesa-libEGLUpgrade mesa-libglapiUpgrade libinput-utilsUpgrade libglvnd-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libgbm-debuginfoUpgrade libX11-xcbUpgrade libinputUpgrade xorg-x11-server-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-libEGL-develUpgrade libX11-develUpgrade libglvnd-opengl-debuginfoUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfo | Mar 12, 2024 | Dec 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-xvncUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-extra | Dec 3, 2020 | Dec 1, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04 | Dec 2, 2020 | Dec 1, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub