CVE-2020-25697

low-risk
Published 2021-05-26

A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the server it is expecting to connect to.

Do I need to act?

-
0.06% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.0/10 High
LOCAL / HIGH complexity

Affected Products (1)

Affected Vendors

X.Org

References (10)

Mailing List http://www.openwall.com/lists/oss-security/2020/11/09/3
Mailing List http://www.openwall.com/lists/oss-security/2020/11/09/3
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1895295
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430...
Mailing List https://seclists.org/oss-sec/2020/q4/105
Mailing List http://www.openwall.com/lists/oss-security/2020/11/09/3
Mailing List http://www.openwall.com/lists/oss-security/2020/11/09/3
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1895295
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430...
Mailing List https://seclists.org/oss-sec/2020/q4/105
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal