Red Hat Security Advisory

RHSA-2021:1804

userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update

Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) libinput-devel-1.16.3-1.el8, libwacom-devel-1.6-2.el8, mesa-libOSMesa-devel-20.3.3-2.el8 +3
Red Hat Enterprise Linux AppStream (v. 8) egl-wayland-1.1.5-3.el8, libX11-1.6.8-4.el8, libX11-common-1.6.8-4.el8 +38

Fixes 9 records

TI-2020-11231 CVE-2020-14363 · GHSA-qmwg-hw9q-xg39

Integer overflow in X11 Project libX11

LOW 35

An integer overflow vulnerability leading to a double-free was found in libX11.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00562 Published 2020-09-11 Partial fix CWE-190

TI-2020-11230 CVE-2020-14362 · GHSA-wfwj-6wvw-xhcw

Integer underflow in xorg-x11-server

LOW 35

A flaw was found in X.Org Server before xorg-x11-server 1.20.9.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00575 Published 2020-09-15 Partial fix CWE-191

TI-2020-11229 CVE-2020-14361 · GHSA-4ghg-p426-jc5w

Integer underflow in xorg-x11-server

LOW 35

A flaw was found in X.Org Server before xorg-x11-server 1.20.9.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00589 Published 2020-09-15 Partial fix CWE-191

TI-2020-11217 CVE-2020-14346 · GHSA-483f-26r4-2fvr

Integer underflow in xorg-x11-server

LOW 35

A flaw was found in xorg-x11-server before 1.20.9.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00604 Published 2020-09-15 Partial fix CWE-191

TI-2020-11216 CVE-2020-14345 · GHSA-6xpw-chm5-x9v3

Memory corruption in xorg-x11-server

LOW 35

A flaw was found in X.Org Server before xorg-x11-server 1.20.9.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00571 Published 2020-09-15 Partial fix CWE-119

TI-2020-15727 CVE-2020-25712 · GHSA-93gx-49qx-8f59

Heap-based buffer overflow in xorg-x11-server

LOW 34

A flaw was found in xorg-x11-server before 1.20.10.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0034 Published 2020-12-15 Partial fix CWE-122

TI-2020-11228 CVE-2020-14360 · GHSA-p2mv-74m8-hvq8

Memory corruption in xorg-x11-server

LOW 34

A flaw was found in the X.Org Server before version 1.20.10.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00388 Published 2021-01-20 Partial fix CWE-119

TI-2020-11215 CVE-2020-14344 · GHSA-g6cq-58wq-v493

Integer overflow in X11 Project libX11

LOW 30

An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00455 Published 2020-08-05 Partial fix CWE-190

TI-2020-11218 CVE-2020-14347 · GHSA-7m6m-38f5-wg3j

A flaw was found in the way xserver memory was not properly initialized.

LOW 25

A flaw was found in the way xserver memory was not properly initialized.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00379 Published 2020-08-05 Partial fix CWE-665