CVE-2020-14361
Fixed in a distro release EPSS <1%
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Products: x.org x_server, canonical ubuntu_linux, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | libglvnd | 1:1.3.2-1.el8 |
| AlmaLinux 8 | libglvnd-core-devel | 1:1.3.2-1.el8 |
| AlmaLinux 8 | libglvnd-devel | 1:1.3.2-1.el8 |
| AlmaLinux 8 | libglvnd-egl | 1:1.3.2-1.el8 |
| AlmaLinux 8 | libglvnd-gles | 1:1.3.2-1.el8 |
| AlmaLinux 8 | libglvnd-glx | 1:1.3.2-1.el8 |
| AlmaLinux 8 | libglvnd-opengl | 1:1.3.2-1.el8 |
| AlmaLinux 8 | libinput-devel | 1.16.3-1.el8 |
| AlmaLinux 8 | libwacom-devel | 1.6-2.el8 |
| AlmaLinux 8 | mesa-libOSMesa-devel | 20.3.3-2.el8 |
| AlmaLinux 8 | mesa-libgbm-devel | 20.3.3-2.el8 |
| AlmaLinux 8 | xorg-x11-drivers | 7.7-30.el8 |
| AlmaLinux 8 | xorg-x11-server-devel | 1.20.10-1.el8 |
| AlmaLinux 8 | xorg-x11-server-source | 1.20.10-1.el8 |
| Alpine 3.10 | xorg-server | 1.20.5-r2 |
| Alpine 3.11 | xorg-server | 1.20.6-r2 |
| Alpine 3.12 | xorg-server | 1.20.9-r0 |
| Alpine 3.9 | xorg-server | 1.20.3-r2 |
| Amazon Linux 2 | xorg-x11-server-Xdmx | 1.20.4-12.amzn2.0.1 |
| Amazon Linux 2 | xorg-x11-server-Xephyr | 1.20.4-12.amzn2.0.1 |
| Amazon Linux 2 | xorg-x11-server-Xnest | 1.20.4-12.amzn2.0.1 |
| Amazon Linux 2 | xorg-x11-server-Xorg | 1.20.4-12.amzn2.0.1 |
| Amazon Linux 2 | xorg-x11-server-Xvfb | 1.20.4-12.amzn2.0.1 |
| Amazon Linux 2 | xorg-x11-server-Xwayland | 1.20.4-12.amzn2.0.1 |
| Amazon Linux 2 | xorg-x11-server-common | 1.20.4-12.amzn2.0.1 |
| Amazon Linux 2 | xorg-x11-server-devel | 1.20.4-12.amzn2.0.1 |
| Amazon Linux 2 | xorg-x11-server-source | 1.20.4-12.amzn2.0.1 |
| Debian 10 | xorg-server | 2:1.20.4-1+deb10u1 |
| Debian 12 | xorg-server | 2:1.20.9-1 |
| Debian 13 | xorg-server | 2:1.20.9-1 |
| Debian 14 | xorg-server | 2:1.20.9-1 |
| Debian 9 | xorg-server | 2:1.19.2-1+deb9u6 |
| Red Hat Enterprise Linux 6 | xorg-x11-server | 0:1.17.4-18.el6_10 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-Xdmx | 0:1.17.4-18.el6_10 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-Xephyr | 0:1.17.4-18.el6_10 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-Xnest | 0:1.17.4-18.el6_10 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-Xorg | 0:1.17.4-18.el6_10 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-Xvfb | 0:1.17.4-18.el6_10 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-common | 0:1.17.4-18.el6_10 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-debuginfo | 0:1.17.4-18.el6_10 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-devel | 0:1.17.4-18.el6_10 |
| Red Hat Enterprise Linux 6 | xorg-x11-server-source | 0:1.17.4-18.el6_10 |
| Red Hat Enterprise Linux 7 | xorg-x11-server | 0:1.20.4-12.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xdmx | 0:1.20.4-12.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xephyr | 0:1.20.4-12.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xnest | 0:1.20.4-12.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xorg | 0:1.20.4-12.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xvfb | 0:1.20.4-12.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xwayland | 0:1.20.4-12.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-common | 0:1.20.4-12.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-debuginfo | 0:1.20.4-12.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-devel | 0:1.20.4-12.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-source | 0:1.20.4-12.el7_9 |
| Red Hat Enterprise Linux 8 | drm-utils-debuginfo | 0:2.4.103-1.el8 |
| Red Hat Enterprise Linux 8 | egl-wayland | 0:1.1.5-3.el8 |
| Red Hat Enterprise Linux 8 | egl-wayland-debuginfo | 0:1.1.5-3.el8 |
| Red Hat Enterprise Linux 8 | egl-wayland-debugsource | 0:1.1.5-3.el8 |
| Red Hat Enterprise Linux 8 | libX11 | 0:1.6.8-4.el8 |
| Red Hat Enterprise Linux 8 | libX11-common | 0:1.6.8-4.el8 |
| Red Hat Enterprise Linux 8 | libX11-debuginfo | 0:1.6.8-4.el8 |
| Red Hat Enterprise Linux 8 | libX11-debugsource | 0:1.6.8-4.el8 |
| Red Hat Enterprise Linux 8 | libX11-devel | 0:1.6.8-4.el8 |
| Red Hat Enterprise Linux 8 | libX11-xcb | 0:1.6.8-4.el8 |
| Red Hat Enterprise Linux 8 | libX11-xcb-debuginfo | 0:1.6.8-4.el8 |
| Red Hat Enterprise Linux 8 | libdrm | 0:2.4.103-1.el8 |
| Red Hat Enterprise Linux 8 | libdrm-debuginfo | 0:2.4.103-1.el8 |
| Red Hat Enterprise Linux 8 | libdrm-debugsource | 0:2.4.103-1.el8 |
| Red Hat Enterprise Linux 8 | libdrm-devel | 0:2.4.103-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-core-devel | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-debuginfo | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-debugsource | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-devel | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-egl | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-egl-debuginfo | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-gles | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-gles-debuginfo | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-glx | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-glx-debuginfo | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-opengl | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libglvnd-opengl-debuginfo | 1:1.3.2-1.el8 |
| Red Hat Enterprise Linux 8 | libinput | 0:1.16.3-1.el8 |
| Red Hat Enterprise Linux 8 | libinput-debuginfo | 0:1.16.3-1.el8 |
| Red Hat Enterprise Linux 8 | libinput-debugsource | 0:1.16.3-1.el8 |
| Red Hat Enterprise Linux 8 | libinput-devel | 0:1.16.3-1.el8 |
| Red Hat Enterprise Linux 8 | libinput-test-debuginfo | 0:1.16.3-1.el8 |
| Red Hat Enterprise Linux 8 | libinput-utils | 0:1.16.3-1.el8 |
| Red Hat Enterprise Linux 8 | libinput-utils-debuginfo | 0:1.16.3-1.el8 |
| Red Hat Enterprise Linux 8 | libwacom | 0:1.6-2.el8 |
| Red Hat Enterprise Linux 8 | libwacom-data | 0:1.6-2.el8 |
| Red Hat Enterprise Linux 8 | libwacom-debuginfo | 0:1.6-2.el8 |
| Red Hat Enterprise Linux 8 | libwacom-debugsource | 0:1.6-2.el8 |
| Red Hat Enterprise Linux 8 | libwacom-devel | 0:1.6-2.el8 |
| Red Hat Enterprise Linux 8 | mesa | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-debuginfo | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-debugsource | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-dri-drivers | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-dri-drivers-debuginfo | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-filesystem | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libEGL | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libEGL-debuginfo | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libEGL-devel | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libGL | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libGL-debuginfo | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libGL-devel | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libOSMesa | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libOSMesa-debuginfo | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libOSMesa-devel | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libgbm | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libgbm-debuginfo | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libgbm-devel | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libglapi | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libglapi-debuginfo | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libxatracker | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-libxatracker-debuginfo | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-vdpau-drivers | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-vdpau-drivers-debuginfo | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-vulkan-devel | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-vulkan-drivers | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | mesa-vulkan-drivers-debuginfo | 0:20.3.3-2.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-drivers | 0:7.7-30.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xdmx | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xdmx-debuginfo | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xephyr | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xephyr-debuginfo | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xnest | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xnest-debuginfo | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xorg | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xorg-debuginfo | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xvfb | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xvfb-debuginfo | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xwayland | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-Xwayland-debuginfo | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-common | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-debuginfo | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-debugsource | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-devel | 0:1.20.10-1.el8 |
| Red Hat Enterprise Linux 8 | xorg-x11-server-source | 0:1.20.10-1.el8 |
| Rocky Linux 8 | egl-wayland | 0:1.1.5-3.el8 |
| Rocky Linux 8 | libX11 | 0:1.6.8-4.el8 |
| Rocky Linux 8 | libdrm | 0:2.4.103-1.el8 |
| Rocky Linux 8 | libglvnd | 1:1.3.2-1.el8 |
| Rocky Linux 8 | libinput | 0:1.16.3-1.el8 |
| Rocky Linux 8 | libwacom | 0:1.6-2.el8 |
| Rocky Linux 8 | mesa | 0:20.3.3-2.el8 |
| Rocky Linux 8 | xorg-x11-drivers | 0:7.7-30.el8 |
| Rocky Linux 8 | xorg-x11-server | 0:1.20.10-1.el8 |
| SUSE Enterprise Storage 5 | xorg-x11-server | 7.6_1.18.3-76.29.1 |
| SUSE HPE Helion OpenStack 8 | xorg-x11-server | 7.6_1.18.3-76.29.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | xorg-x11-server | 1.19.6-8.19.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | xorg-x11-server | 1.19.6-8.19.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | xorg-x11-server | 1.20.3-14.5.5.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | xorg-x11-server | 1.20.3-22.5.5.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | xorg-x11-server | 1.20.3-14.5.5.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | xorg-x11-server | 1.20.3-22.5.5.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | xorg-x11-server | 7.4-27.122.29.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | xorg-x11-server | 7.4-27.122.29.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | xorg-x11-server | 7.6_1.18.3-76.29.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | xorg-x11-server | 7.6_1.18.3-76.29.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | xorg-x11-server | 7.6_1.18.3-76.29.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | xorg-x11-server | 7.6_1.18.3-76.29.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | xorg-x11-server | 1.19.6-4.11.1 |
| SUSE Linux Enterprise Server 12 SP5 | xorg-x11-server | 1.19.6-10.12.1 |
| SUSE Linux Enterprise Server 15-LTSS | xorg-x11-server | 1.19.6-8.19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | xorg-x11-server | 7.6_1.18.3-76.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | xorg-x11-server | 7.6_1.18.3-76.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | xorg-x11-server | 1.19.6-4.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | xorg-x11-server | 1.19.6-10.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | xorg-x11-server | 1.19.6-8.19.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | xorg-x11-server | 1.19.6-10.12.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP1 | xorg-x11-server | 1.20.3-14.5.5.2 |
| SUSE Linux Enterprise Workstation Extension 15 SP2 | xorg-x11-server | 1.20.3-22.5.5.1 |
| SUSE OpenStack Cloud 7 | xorg-x11-server | 7.6_1.18.3-76.29.1 |
| SUSE OpenStack Cloud 8 | xorg-x11-server | 7.6_1.18.3-76.29.1 |
| SUSE OpenStack Cloud 9 | xorg-x11-server | 1.19.6-4.11.1 |
| SUSE OpenStack Cloud Crowbar 8 | xorg-x11-server | 7.6_1.18.3-76.29.1 |
| SUSE OpenStack Cloud Crowbar 9 | xorg-x11-server | 1.19.6-4.11.1 |
| Ubuntu 16.04 LTS | xorg-server | 2:1.18.4-0ubuntu0.9 |
| Ubuntu 16.04 LTS | xorg-server-hwe-16.04 | 2:1.19.6-1ubuntu4.1~16.04.3 |
| Ubuntu 18.04 LTS | xorg-server | 2:1.19.6-1ubuntu4.5 |
| Ubuntu 18.04 LTS | xorg-server-hwe-18.04 | 2:1.20.8-2ubuntu2.2~18.04.2 |
| Ubuntu 20.04 LTS | xorg-server | 2:1.20.8-2ubuntu2.3 |
| Ubuntu Pro 14.04 LTS | xorg-server | 2:1.15.1-0ubuntu2.11+esm2 |
| openSUSE Leap 15.1 | xorg-x11-server | 1.20.3-lp151.4.6.1 |
| openSUSE Leap 15.2 | xorg-x11-server | 1.20.3-lp152.8.6.1 |
| openSUSE Tumbleweed | xorg-x11-server | 1.20.13-1.2 |