CVE-2020-25712

🗓️ 15 Dec 2020 16:52:38Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 293 Views

A heap-buffer overflow in XkbSetDeviceInfo in xorg-x11-server before 1.20.10 may lead to privilege escalation

Reporter	Title	Published	Views	Family All 146
ALT Linux	Security fix for the ALT Linux 10 package xorg-server version 2:1.20.10-alt1	2 Dec 202000:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
FreeBSD	xorg-server -- Multiple input validation failures in X server XKB extension	1 Dec 202000:00	–	freebsd
ATTACKERKB	CVE-2021-3567	25 Mar 202219:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : xorg-x11-server (ALAS-2021-1592)	26 Jan 202100:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0087: userspace graphics, xorg-x11, and mesa (ALINUX3-SA-2022:0087)	14 May 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0114: userspace graphics, xorg-x11, and mesa (ALINUX3-SA-2022:0114)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : userspace graphics, xorg-x11, and mesa (ALSA-2021:1804)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : userspace graphics, xorg-x11, and mesa (CESA-2021:1804)	19 May 202100:00	–	nessus
Tenable Nessus	CentOS 7 : xorg-x11-server (RHSA-2020:5408)	27 Feb 202100:00	–	nessus

NVD

Vulners

Node

x.org x_serverRange<1.20.10

Node

redhat enterprise_linuxMatch8.0

[
  {
    "product": "xorg-x11-server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "xorg-x11-server 1.20.10"
      }
    ]
  }
]

Source	Link
lists	www.lists.x.org/archives/xorg-announce/2020-December/003066.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

21 Nov 2024 05:18Current

7.9High risk

Vulners AI Score7.9

CVSS 24.6

CVSS 3.17.8

EPSS0.00133

CWE-122