A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-develUpgrade libwacom-develUpgrade xorg-x11-server-sourceUpgrade libinput-develUpgrade libglvnd-openglUpgrade libglvnd-glxUpgrade libglvnd-eglUpgrade xorg-x11-driversUpgrade libglvnd-develUpgrade libglvnd-core-develUpgrade libglvndUpgrade mesa-libOSMesa-develUpgrade libglvnd-glesUpgrade mesa-libgbm-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xdmx | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade mesa-filesystemUpgrade xorg-x11-server-debugsourceUpgrade libglvnd-glx-debuginfoUpgrade libinput-utilsUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-vulkan-develUpgrade libdrmUpgrade mesa-vdpau-driversUpgrade libglvnd-develUpgrade libglvndUpgrade mesa-dri-driversUpgrade libglvnd-glxUpgrade drm-utils-debuginfoUpgrade libwacomUpgrade mesa-libxatracker-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libinputUpgrade xorg-x11-server-XorgUpgrade libX11-xcb-debuginfoUpgrade libglvnd-glesUpgrade libdrm-debuginfoUpgrade mesa-libGL-debuginfoUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-driversUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libdrm-develUpgrade libX11-debuginfoUpgrade libglvnd-openglUpgrade libglvnd-opengl-debuginfoUpgrade egl-wayland-debuginfoUpgrade libglvnd-core-develUpgrade libX11-develUpgrade egl-wayland-debugsourceUpgrade egl-waylandUpgrade libglvnd-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade mesa-debugsourceUpgrade libwacom-dataUpgrade mesa-debuginfoUpgrade libglvnd-eglUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XephyrUpgrade mesa-libEGL-develUpgrade mesa-libEGL-debuginfoUpgrade libwacom-debugsourceUpgrade libinput-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-libGL-develUpgrade mesa-libGLUpgrade mesa-libgbmUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XdmxUpgrade libglvnd-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade mesa-libglapiUpgrade libinput-utils-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libdrm-debugsourceUpgrade xorg-x11-server-XvfbUpgrade libwacom-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-libEGLUpgrade libinput-test-debuginfoUpgrade xorg-x11-server-develUpgrade mesa-libOSMesaUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-commonUpgrade libX11Upgrade libinput-debuginfoUpgrade libX11-xcbUpgrade libX11-debugsourceUpgrade mesa-libgbm-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xorg-dmxUpgrade xwaylandUpgrade xephyrUpgrade xorg-nestserverUpgrade xorg-server | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade libglvnd-glesUpgrade mesa-libgbmUpgrade libglvnd-openglUpgrade libdrmUpgrade mesa-vulkan-driversUpgrade libdrm-develUpgrade libglvnd-core-develUpgrade mesa-libGLUpgrade mesa-libEGLUpgrade mesa-libOSMesa-develUpgrade mesa-libgbm-develUpgrade libglvnd-develUpgrade xorg-x11-driversUpgrade libX11-commonUpgrade libglvnd-eglUpgrade mesa-libOSMesaUpgrade mesa-libGL-develUpgrade libinput-utilsUpgrade libglvndUpgrade libwacom-dataUpgrade libX11-develUpgrade libglvnd-glxUpgrade libinput-develUpgrade mesa-dri-driversUpgrade mesa-vdpau-driversUpgrade libwacom-develUpgrade xorg-x11-server-XephyrUpgrade mesa-vulkan-develUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XdmxUpgrade egl-waylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade mesa-filesystemUpgrade mesa-libEGL-develUpgrade libwacomUpgrade libX11-xcbUpgrade mesa-libglapiUpgrade xorg-x11-server-XnestUpgrade libinputUpgrade xorg-x11-server-XwaylandUpgrade libX11Upgrade xorg-x11-server-source | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-libgbm-develUpgrade xorg-x11-server-XnestUpgrade libglvndUpgrade libwacom-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-libglapi-debuginfoUpgrade libdrm-develUpgrade drm-utils-debuginfoUpgrade libinput-utilsUpgrade libinput-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libglvnd-core-develUpgrade xorg-x11-server-XdmxUpgrade mesa-debugsourceUpgrade libX11-debugsourceUpgrade mesa-libOSMesa-develUpgrade libglvnd-debuginfoUpgrade libglvnd-glesUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade mesa-libGL-develUpgrade egl-wayland-debugsourceUpgrade mesa-libxatrackerUpgrade libX11-xcbUpgrade libinput-debugsourceUpgrade libdrmUpgrade mesa-debuginfoUpgrade mesa-libGL-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XorgUpgrade mesa-libGLUpgrade mesa-libOSMesaUpgrade mesa-libglapiUpgrade libglvnd-egl-debuginfoUpgrade libglvnd-openglUpgrade mesa-libOSMesa-debuginfoUpgrade mesa-vdpau-drivers-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libX11-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-dri-driversUpgrade libdrm-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-vdpau-driversUpgrade mesa-vulkan-driversUpgrade libX11-commonUpgrade libwacom-develUpgrade libglvnd-glxUpgrade xorg-x11-server-debuginfoUpgrade mesa-libEGL-debuginfoUpgrade egl-waylandUpgrade mesa-libEGLUpgrade libdrm-debugsourceUpgrade libinputUpgrade xorg-x11-server-XephyrUpgrade libglvnd-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade libwacom-dataUpgrade xorg-x11-server-commonUpgrade libX11-develUpgrade libglvnd-eglUpgrade mesa-libgbmUpgrade libwacom-debugsourceUpgrade libwacomUpgrade libX11Upgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade xorg-x11-driversUpgrade mesa-libgbm-debuginfoUpgrade xorg-x11-server-sourceUpgrade libglvnd-glx-debuginfoUpgrade mesa-filesystemUpgrade libinput-test-debuginfoUpgrade mesa-vulkan-develNo solution existsUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libinput-devel | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade mesa-debugsourceUpgrade libwacomUpgrade mesa-libGLUpgrade mesa-libgbmUpgrade mesa-libxatracker-debuginfoUpgrade libglvnd-glesUpgrade mesa-vdpau-driversUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade libX11-xcbUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade libwacom-debuginfoUpgrade libglvnd-eglUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libinput-develUpgrade libwacom-debugsourceUpgrade libinput-debuginfoUpgrade libX11-debugsourceUpgrade libX11-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libdrm-debugsourceUpgrade mesa-libOSMesa-develUpgrade libglvnd-egl-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-vdpau-drivers-debuginfoUpgrade libinput-utils-debuginfoUpgrade libglvnd-debugsourceUpgrade mesa-libEGLUpgrade mesa-vulkan-drivers-debuginfoUpgrade mesa-libglapiUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade libinputUpgrade mesa-libEGL-develUpgrade mesa-libGL-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-develUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-commonUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XvfbUpgrade mesa-vulkan-driversUpgrade libX11-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-libGL-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libX11-xcb-debuginfoUpgrade libdrm-debuginfoUpgrade libinput-debugsourceUpgrade mesa-libOSMesaUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade egl-waylandUpgrade mesa-libgbm-develUpgrade libglvnd-openglUpgrade libglvndUpgrade xorg-x11-server-XwaylandUpgrade libdrm-develUpgrade xorg-x11-server-debugsourceUpgrade libX11Upgrade libglvnd-core-develUpgrade libwacom-develUpgrade libdrmUpgrade libglvnd-develUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-driversUpgrade xorg-x11-server-debuginfoUpgrade libinput-utilsUpgrade libglvnd-glxUpgrade mesa-dri-driversUpgrade mesa-debuginfoUpgrade mesa-filesystemUpgrade xorg-x11-server-Xorg | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-XvncUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-source | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub