Summary
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the
XkbSetNames function. A local attacker could possibly use this issue to
escalate privileges.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | xorg-server | 2:1.18.4-0ubuntu0.10 |
| Ubuntu · 16.04 LTS 16.04:LTS | xorg-server-hwe-16.04 | 2:1.19.6-1ubuntu4.1~16.04.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | xorg-server | 2:1.19.6-1ubuntu4.6 |
| Ubuntu · 18.04 LTS 18.04:LTS | xorg-server-hwe-18.04 | 2:1.20.8-2ubuntu2.2~18.04.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | xorg-server | 2:1.20.8-2ubuntu2.4 |
Vulnerabilities 1
-
Unscored —
A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lea…
References
-
report
https://ubuntu.com/security/CVE-2020-14345