Privilege Escalation Vulnerability in X.Org Server Product by Red Hat
CVE-2020-25712

7.8HIGH

Key Information:

Vendor

X.org

Status
Xorg-x11-server
Vendor
CVE Published:
15 December 2020

What is CVE-2020-25712?

A heap-buffer overflow vulnerability exists in the X.Org Server prior to version 1.20.10, specifically in the XkbSetDeviceInfo function. Exploitation of this flaw may allow an attacker to escalate privileges, impacting the confidentiality, integrity, and availability of affected systems. This vulnerability represents a significant risk to users and systems that rely on the X.Org Server for graphical interactions.

Affected Version(s)

xorg-x11-server xorg-x11-server 1.20.10

References

https://bugzilla.redhat.com/show_bug.cgi?id=1887276
x_refsource_MISC
https://lists.x.org/archives/xorg-announce/2020-December/...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.