Summary
Jan-Niklas Sohn discovered that the X.Org X Server XKB extension
incorrectly handled certain inputs. A local attacker could possibly use
this issue to escalate privileges.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | xorg-server | 2:1.18.4-0ubuntu0.11 |
| Ubuntu · 16.04 LTS 16.04:LTS | xorg-server-hwe-16.04 | 2:1.19.6-1ubuntu4.1~16.04.5 |
| Ubuntu · 18.04 LTS 18.04:LTS | xorg-server | 2:1.19.6-1ubuntu4.8 |
| Ubuntu · 18.04 LTS 18.04:LTS | xorg-server-hwe-18.04 | 2:1.20.8-2ubuntu2.2~18.04.4 |
| Ubuntu · 20.04 LTS 20.04:LTS | xorg-server | 2:1.20.8-2ubuntu2.6 |
Vulnerabilities 2
-
Unscored —
A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead…
-
Unscored —
A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege …