CVE-2018-14665
Fixed in a distro release EPSS 27%
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
Products: x.org x_server, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, canonical ubuntu_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | xorg-server | 1.20.3-r0 |
| Alpine 3.11 | xorg-server | 1.20.3-r0 |
| Alpine 3.12 | xorg-server | 1.20.3-r0 |
| Alpine 3.6 | xorg-server | 1.19.5-r1 |
| Alpine 3.7 | xorg-server | 1.19.5-r1 |
| Alpine 3.8 | xorg-server | 1.19.6-r3 |
| Alpine 3.9 | xorg-server | 1.20.3-r0 |
| Arch Linux | xorg-server | 1.20.3-1 |
| Debian 12 | xorg-server | 2:1.20.3-1 |
| Debian 13 | xorg-server | 2:1.20.3-1 |
| Debian 14 | xorg-server | 2:1.20.3-1 |
| Debian 9 | xorg-server | 2:1.19.2-1+deb9u4 |
| Red Hat Enterprise Linux 7 | xorg-x11-server | 0:1.20.1-5.1.el7 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xdmx | 0:1.20.1-5.1.el7 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xephyr | 0:1.20.1-5.1.el7 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xnest | 0:1.20.1-5.1.el7 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xorg | 0:1.20.1-5.1.el7 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xvfb | 0:1.20.1-5.1.el7 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xwayland | 0:1.20.1-5.1.el7 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-common | 0:1.20.1-5.1.el7 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-debuginfo | 0:1.20.1-5.1.el7 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-devel | 0:1.20.1-5.1.el7 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-source | 0:1.20.1-5.1.el7 |
| SUSE Linux Enterprise Module for Basesystem 15 | xorg-x11-server | 1.19.6-8.3.2 |
| SUSE Linux Enterprise Module for Development Tools 15 | xorg-x11-server | 1.19.6-8.3.2 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | xorg-x11-server | 7.4-27.122.21.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | xorg-x11-server | 7.4-27.122.21.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | xorg-x11-server | 7.4-27.122.21.1 |
| SUSE Linux Enterprise Server 11 SP4 | xorg-x11-server | 7.4-27.122.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | xorg-x11-server | 7.4-27.122.21.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | xorg-x11-server | 7.4-27.122.21.1 |
| SUSE Linux Enterprise Workstation Extension 15 | xorg-x11-server | 1.19.6-8.3.2 |
| Ubuntu 16.04 LTS | xorg-server-hwe-16.04 | 2:1.19.6-1ubuntu4.1~16.04.2 |
| Ubuntu 18.04 LTS | xorg-server | 2:1.19.6-1ubuntu4.2 |
| openSUSE Tumbleweed | xorg-x11-server | 1.20.13-1.2 |