A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 22, 2024 | Apr 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfo | May 4, 2021 | Apr 26, 2021 |
| Amazon_linux | — | Upgrade xorg-x11-server | May 20, 2021 | Apr 13, 2021 |
| Centos_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx | Jun 1, 2021 | Apr 26, 2021 |
| Debian | — | Upgrade xorg-server | Apr 16, 2021 | Apr 16, 2021 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | May 3, 2021 | Apr 26, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Sep 16, 2021 | Apr 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Apr 30, 2021 | Apr 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Jul 19, 2021 | Apr 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Jun 28, 2021 | Apr 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Sep 29, 2021 | Apr 26, 2021 |
| Oracle Solaris | — | Upgrade x11/server/xorg/driver/xorg-video-openchrome to version 0.6.0-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video-ast to version 1.1.5-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video-vboxvideo to version 1.0.0-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-input-void to version 1.4.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.11-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.11-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video-mach64 to version 6.9.6-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.11-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-input-synaptics to version 1.9.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.11-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video-cirrus to version 1.5.3-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video-vmware to version 13.3.0-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xvnc to version 1.10.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video-ati to version 18.1.0-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video-dummy to version 0.3.8-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-input-mouse to version 1.9.3-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.11-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-input-keyboard to version 1.9.0-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video-mga to version 2.0.0-11.4.35.0.1.94.2 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video-vesa to version 2.5.0-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-input-vmmouse to version 13.1.0-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video-r128 to version 6.12.0-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video-intel to version 2.99.917-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.11-11.4.35.0.1.94.2 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Apr 26, 2021 |
| Oracle_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland | May 20, 2021 | Apr 13, 2021 |
| Redhat_linux | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develNo solution existsUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb | May 21, 2021 | Apr 26, 2021 |
| Suse | — | suse-upgrade-xorg-x11-serversuse-upgrade-xorg-x11-server-extrasuse-upgrade-xorg-x11-server-sdksuse-upgrade-xorg-x11-server-sourcesuse-upgrade-xorg-x11-server-waylandsuse-upgrade-xorg-x11-server-xvfbsuse-upgrade-xorg-x11-xvncsuse-upgrade-xwayland | Apr 14, 2021 | Apr 13, 2021 |
| Ubuntu | ubuntu-pro-upgrade-xserver-xorg-coreubuntu-upgrade-xserver-xorg-coreubuntu-upgrade-xserver-xorg-core-hwe-16-04ubuntu-upgrade-xserver-xorg-core-hwe-18-04 | Apr 14, 2021 | Apr 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub