Skip to content
OpenAdvisories
Medium USN-4488-1 4 CVEs

xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerabilities

Published Sep 2, 2020 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the
input extension protocol. A local attacker could possibly use this issue to
escalate privileges. (CVE-2020-14346)

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly initialized
memory. A local attacker could possibly use this issue to obtain sensitive
information. (CVE-2020-14347)

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the
XkbSelectEvents function. A local attacker could possibly use this issue to
escalate privileges. (CVE-2020-14361)

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the
XRecordRegisterClients function. A local attacker could possibly use this
issue to escalate privileges. (CVE-2020-14362)

Fixed packages 5

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS xorg-server 2:1.18.4-0ubuntu0.9
Ubuntu · 16.04 LTS 16.04:LTS xorg-server-hwe-16.04 2:1.19.6-1ubuntu4.1~16.04.3
Ubuntu · 18.04 LTS 18.04:LTS xorg-server 2:1.19.6-1ubuntu4.5
Ubuntu · 18.04 LTS 18.04:LTS xorg-server-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.2
Ubuntu · 20.04 LTS 20.04:LTS xorg-server 2:1.20.8-2ubuntu2.3

Vulnerabilities 4

References

  • report
    https://ubuntu.com/security/CVE-2020-14346
  • report
    https://ubuntu.com/security/CVE-2020-14347
  • report
    https://ubuntu.com/security/CVE-2020-14361
  • report
    https://ubuntu.com/security/CVE-2020-14362