CVE-2018-14665

CVE-2018-14665 0x00 简介 印度安全研究员Narendra Shinde在X.Org Server软件包中发现了一个普通账号提权root的高危漏洞（CVE-2018-14665），它影响了主要的Linux发行版，包括OpenBSD，Debian，Ubuntu，CentOS，Red Hat和Fedora。 Xorg X项目提供了X Window系统的开源实现（也就是X11，或简称X，它是位图显示的窗口系统。它提供了GUI环境的基本框架：在显示设备上绘制和移动窗口以及交互用鼠标和键盘。 Shinde发现Xorg X服务器无法正确处理和验证至少以下两个命令行参数的参数：...

The vulnerability of the X.Org Server software arises from errors in processing and checking command-line parameters, allowing an attacker to gain root privileges and overwrite any file in the operating system.

Vulnerability of the X.Org Server software, caused by errors in processing and checking command-line parameters. Exploiting this vulnerability can allow a remote attacker to gain root privileges and rewrite any file in the operating system using the modulepath and logfile parameters when running...