CVE-2020-25697
Fixed in a distro release EPSS <1%
A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the server it is expecting to connect to.
Products: x.org x_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | xorg-server | 0 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | xtrans | 1.3.5-150000.3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | xtrans | 1.3.5-150000.3.3.1 |
| SUSE Linux Enterprise Real Time 15 SP3 | xtrans | 1.3.5-150000.3.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | xtrans | 1.3.5-5.3.1 |
| Ubuntu 22.04 LTS | libx11 | no fix |
| Ubuntu Pro 14.04 LTS | libx11 | no fix |
| Ubuntu Pro 16.04 LTS | libx11 | no fix |
| Ubuntu Pro 18.04 LTS | libx11 | no fix |
| Ubuntu Pro 20.04 LTS | libx11 | no fix |
| Wolfi | xorg-server | 0 |
| openSUSE Leap 15.4 | xtrans | 1.3.5-150000.3.3.1 |
| openSUSE Leap 15.5 | xtrans | 1.3.5-150000.3.3.1 |
| openSUSE Tumbleweed | xtrans | 1.5.0-1.1 |