A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwacom-develUpgrade libglvnd-eglUpgrade libinput-develUpgrade xorg-x11-server-develUpgrade libglvnd-glxUpgrade libglvnd-openglUpgrade xorg-x11-server-sourceUpgrade libglvnd-develUpgrade xorg-x11-driversUpgrade libglvnd-glesUpgrade libglvndUpgrade mesa-libOSMesa-develUpgrade libglvnd-core-develUpgrade mesa-libgbm-devel | May 4, 2022 | Sep 15, 2020 |
| Alpine Linux | — | Upgrade xorg-server | Oct 26, 2020 | Sep 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-common | Dec 10, 2020 | Sep 15, 2020 |
| Amazon_linux | — | Upgrade xorg-x11-server | Dec 19, 2020 | Aug 25, 2020 |
| Centos_linux | — | Upgrade mesa-libgbm-debuginfoUpgrade libX11Upgrade libX11-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade mesa-libEGLUpgrade libglvnd-egl-debuginfoUpgrade mesa-debuginfoUpgrade libinput-test-debuginfoUpgrade mesa-libgbmUpgrade xorg-x11-server-XdmxUpgrade mesa-debugsourceUpgrade mesa-dri-drivers-debuginfoUpgrade mesa-libOSMesaUpgrade xorg-x11-server-develUpgrade libwacom-debugsourceUpgrade xorg-x11-server-XephyrUpgrade libglvnd-gles-debuginfoUpgrade libinput-debugsourceUpgrade mesa-libxatrackerUpgrade xorg-x11-server-XvfbUpgrade libinput-utils-debuginfoUpgrade libwacom-debuginfoUpgrade mesa-libglapiUpgrade mesa-libEGL-debuginfoUpgrade mesa-libEGL-develUpgrade libdrm-debugsourceUpgrade libglvnd-debuginfoUpgrade libX11-commonUpgrade libglvnd-eglUpgrade libinput-debuginfoUpgrade libwacom-dataUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-commonUpgrade libX11-xcbUpgrade mesa-libGL-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-libGLUpgrade mesa-libglapi-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade mesa-vulkan-driversUpgrade libglvnd-glx-debuginfoUpgrade mesa-filesystemUpgrade mesa-libGL-debuginfoUpgrade libglvnd-glesUpgrade libinput-utilsUpgrade libX11-debuginfoUpgrade libglvnd-opengl-debuginfoUpgrade libglvnd-openglUpgrade libglvnd-develUpgrade libdrmUpgrade mesa-vulkan-develUpgrade mesa-vdpau-driversUpgrade mesa-libOSMesa-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-server-XorgUpgrade libinputUpgrade libglvnd-debugsourceUpgrade libglvnd-glxUpgrade egl-waylandUpgrade xorg-x11-driversUpgrade xorg-x11-server-debuginfoUpgrade libdrm-develUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libwacomUpgrade libdrm-debuginfoUpgrade libX11-develUpgrade egl-wayland-debugsourceUpgrade mesa-dri-driversUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libglvndUpgrade drm-utils-debuginfoUpgrade mesa-libxatracker-debuginfoUpgrade libX11-xcb-debuginfo | Nov 5, 2020 | Sep 15, 2020 |
| Debian | — | Upgrade xorg-server | Sep 1, 2020 | Sep 1, 2020 |
| Freebsd | — | Upgrade xephyrUpgrade xwaylandUpgrade xorg-nestserverUpgrade xorg-serverUpgrade xorg-vfbserverUpgrade xorg-dmx | Aug 26, 2020 | Aug 25, 2020 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server. | Dec 7, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade xorg-x11-server-common | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | Jan 20, 2021 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Nov 2, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server | Nov 3, 2020 | Sep 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Feb 8, 2021 | Sep 15, 2020 |
| Oracle Solaris | — | Upgrade x11/server/xorg to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.12-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-svid to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/compatibility/links-xorg to version 11.4-11.4.27.0.1.82.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.8-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 15, 2020 |
| Oracle_linux | — | Upgrade mesa-vulkan-develUpgrade libwacom-dataUpgrade mesa-libEGL-develUpgrade xorg-x11-server-XnestUpgrade mesa-libxatrackerUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade libX11-develUpgrade mesa-libglapiUpgrade libwacomUpgrade libinputUpgrade xorg-x11-server-XorgUpgrade libglvnd-glxUpgrade xorg-x11-server-XephyrUpgrade libglvndUpgrade xorg-x11-server-XwaylandUpgrade mesa-filesystemUpgrade egl-waylandUpgrade mesa-vdpau-driversUpgrade mesa-dri-driversUpgrade libinput-develUpgrade xorg-x11-server-XvfbUpgrade libX11Upgrade libX11-xcbUpgrade libwacom-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade mesa-libGLUpgrade mesa-vulkan-driversUpgrade xorg-x11-driversUpgrade libglvnd-develUpgrade mesa-libgbm-develUpgrade libX11-commonUpgrade libglvnd-eglUpgrade mesa-libOSMesa-develUpgrade mesa-libEGLUpgrade libglvnd-core-develUpgrade libdrm-develUpgrade libglvnd-openglUpgrade mesa-libgbmUpgrade libglvnd-glesUpgrade libdrmUpgrade libinput-utilsUpgrade mesa-libOSMesaUpgrade mesa-libGL-devel | Nov 9, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade libdrm-develUpgrade drm-utils-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libwacom-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade mesa-debuginfoUpgrade mesa-libglapi-debuginfoUpgrade libinput-utilsUpgrade libglvnd-opengl-debuginfoUpgrade libinput-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libX11-xcbUpgrade mesa-libOSMesaUpgrade libglvnd-debugsourceUpgrade mesa-libGLUpgrade mesa-libxatrackerUpgrade egl-wayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XnestUpgrade mesa-libEGL-develUpgrade mesa-debugsourceUpgrade mesa-libGL-develUpgrade libglvnd-debuginfoUpgrade libdrmUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libX11-debugsourceUpgrade xorg-x11-server-XdmxUpgrade mesa-libxatracker-debuginfoUpgrade libinput-utils-debuginfoUpgrade libglvndUpgrade libglvnd-core-develUpgrade mesa-libOSMesa-develUpgrade xorg-x11-server-XorgUpgrade libinput-debugsourceUpgrade mesa-libGL-debuginfoUpgrade libglvnd-glesUpgrade mesa-libgbm-develUpgrade mesa-libglapiUpgrade libwacom-develUpgrade mesa-vdpau-drivers-debuginfoUpgrade mesa-vulkan-develUpgrade mesa-libEGLUpgrade libX11-xcb-debuginfoUpgrade libglvnd-eglUpgrade libinputUpgrade mesa-vdpau-driversUpgrade libdrm-debuginfoUpgrade mesa-dri-driversUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libglvnd-develUpgrade libglvnd-openglUpgrade libinput-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libX11-debuginfoUpgrade egl-wayland-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoNo solution existsUpgrade mesa-libOSMesa-debuginfoUpgrade xorg-x11-server-XephyrUpgrade libwacom-debugsourceUpgrade libwacomUpgrade libX11-commonUpgrade libglvnd-glxUpgrade egl-waylandUpgrade xorg-x11-server-develUpgrade mesa-libgbm-debuginfoUpgrade libdrm-debugsourceUpgrade libwacom-dataUpgrade mesa-libEGL-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade libX11Upgrade mesa-dri-drivers-debuginfoUpgrade libX11-develUpgrade libinput-test-debuginfoUpgrade libglvnd-glx-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade xorg-x11-server-XvfbUpgrade mesa-vulkan-driversUpgrade xorg-x11-server-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-filesystemUpgrade mesa-libgbmUpgrade xorg-x11-drivers | Nov 5, 2020 | Sep 15, 2020 |
| Rocky_linux | — | Upgrade libX11-debugsourceUpgrade libX11-develUpgrade mesa-libEGL-develUpgrade mesa-libxatrackerUpgrade xorg-x11-server-Xnest-debuginfoUpgrade libinput-utils-debuginfoUpgrade mesa-libgbm-debuginfoUpgrade libinput-debuginfoUpgrade libglvnd-eglUpgrade mesa-libEGL-debuginfoUpgrade libglvnd-egl-debuginfoUpgrade mesa-libOSMesa-debuginfoUpgrade egl-wayland-debugsourceUpgrade mesa-libOSMesa-develUpgrade mesa-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade mesa-vdpau-driversUpgrade mesa-libgbmUpgrade libwacom-debuginfoUpgrade libX11-xcbUpgrade mesa-libxatracker-debuginfoUpgrade mesa-libGLUpgrade libglvnd-glesUpgrade mesa-vdpau-drivers-debuginfoUpgrade xorg-x11-server-XvfbUpgrade libglvnd-opengl-debuginfoUpgrade mesa-vulkan-drivers-debuginfoUpgrade libinputUpgrade mesa-libEGLUpgrade xorg-x11-server-XnestUpgrade libglvnd-debugsourceUpgrade mesa-libglapiUpgrade libinput-develUpgrade mesa-libglapi-debuginfoUpgrade libwacom-debugsourceUpgrade libwacomUpgrade xorg-x11-server-XdmxUpgrade libglvnd-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XephyrUpgrade mesa-libGL-develUpgrade xorg-x11-server-develUpgrade libdrm-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade libglvnd-gles-debuginfoUpgrade libglvnd-core-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade libinput-utilsUpgrade mesa-libGL-debuginfoUpgrade libglvnd-develUpgrade mesa-libgbm-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade libdrm-develUpgrade libX11-debuginfoUpgrade libinput-debugsourceUpgrade egl-wayland-debuginfoUpgrade mesa-vulkan-driversUpgrade mesa-dri-driversUpgrade egl-waylandUpgrade mesa-vulkan-develUpgrade libwacom-develUpgrade libdrmUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade libglvndUpgrade libglvnd-openglUpgrade xorg-x11-server-debugsourceUpgrade libX11Upgrade libglvnd-glx-debuginfoUpgrade libX11-xcb-debuginfoUpgrade mesa-dri-drivers-debuginfoUpgrade libdrm-debuginfoUpgrade libglvnd-glxUpgrade mesa-libOSMesaUpgrade xorg-x11-driversUpgrade mesa-debuginfoUpgrade xorg-x11-server-XorgUpgrade mesa-filesystem | Mar 12, 2024 | Sep 15, 2020 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-xvncUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server | Sep 2, 2020 | Aug 25, 2020 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 | Sep 3, 2020 | Aug 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub