CVE-2018-14665: canonical ubuntu_linux Incorrect Authorization

CVSS: 7.2v2.0HighModified

AliasesALPINE-CVE-2018-14665MGASA-2018-0421SUSE-SU-2018:3456-1+6 more

Published 25-10-2018Last modified 05-08-2024

Vulnerability summary

CVE-2018-14665 is a high (CVSS 7.2) Incorrect Authorization vulnerability in canonical ubuntu_linux. EPSS estimates a 27.04% chance of exploitation in the next 30 days, higher than 98% of scored vulnerabilities. 12 public exploits are recorded.

Overall risk

44/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.2/10

010

High · v2.0 (NVD)

EPSS score

27.04%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits12reference, exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:11525-1

Timeline

25-10-2018
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.

CVSS metrics

6 scores · 5 sources · 2 versions

v3.06.6v2.07.2

EPSS trend

Probability

27.04%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 27.04% on 19-09-2026

19-09-202619-10-2026

EPSS score

27.04%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

12 found

referenceUnverified
Exploit Reference (securepatterns.com)
Maturity: unknown
exploit-databaselocalaixUnverified
Xorg X11 Server (AIX) - Local Privilege Escalation
Maturity: poc
exploit-databaselocallinuxUnverified
xorg-x11-server < 1.20.1 - Local Privilege Escalation
Maturity: poc

Show all 12 exploits

exploit-databaselocalmultipleVerified
Xorg X11 Server - SUID privilege escalation (Metasploit)
Maturity: weaponized
exploit-databaselocalmultipleUnverified
xorg-x11-server < 1.20.3 - 'modulepath' Local Privilege Escalation
Maturity: poc
exploit-databaselocalmultipleUnverified
xorg-x11-server < 1.20.3 - Local Privilege Escalation
Maturity: poc
exploit-databaselocalopenbsdUnverified
xorg-x11-server 1.20.3 - Privilege Escalation
Maturity: poc
exploit-databaselocalsolarisUnverified
xorg-x11-server < 1.20.3 (Solaris 11) - 'inittab Local Privilege Escalation
Maturity: poc
exploit-databaselocalunixVerified
Xorg X11 Server - Local Privilege Escalation (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
Xorg X11 Server Local Privilege Escalation
exploit/aix/local/xorg_x11_server
Maturity: weaponized
MetasploitremoteVerified
Xorg X11 Server SUID logfile Privilege Escalation
exploit/multi/local/xorg_x11_suid_server
Maturity: weaponized
MetasploitremoteVerified
Xorg X11 Server SUID modulepath Privilege Escalation
exploit/multi/local/xorg_x11_suid_server_modulepath
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Affected systems

Redhat17 products

Show all 17

Suse9 products

xorg-x11-server&distro=SUSE Linux Enterprise Module for Basesystem 15< 1.19.6-8.3.2
xorg-x11-server&distro=SUSE Linux Enterprise Module for Development Tools 15< 1.19.6-8.3.2
xorg-x11-server&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 7.4-27.122.21.1
xorg-x11-server&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 7.4-27.122.21.1
xorg-x11-server&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA< 7.4-27.122.21.1

Show all 9

Debian2 products

xorg-server< 2:1.20.3-1 | < 2:1.19.2-1+deb9u4
debian_linuxEOL9.0

Ubuntu2 products

xorg-server< 2:1.19.6-1ubuntu4.2
xorg-server-hwe-16.04< 2:1.19.6-1ubuntu4.1~16.04.2

Alpine1 product

xorg-server< 1.20.3-r0 | < 1.19.5-r1 | < 1.19.6-r3

Canonical1 product

ubuntu_linuxEOL16.04 | 18.04 | 18.10

Mageia1 product

x11-server< 1.19.5-1.2.mga6

X.org1 product

x_server< 1.20.3

8 vendors · 34 products

References

39 links

www.exploit-db.com/exploits/45742/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
lists.x.org/archives/xorg-announce/2018-October/002927.htmlMailing ListX Refsource MLISTMitigationPatchVendor AdvisoryARTICLEREPORT
www.exploit-db.com/exploits/45922/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
usn.ubuntu.com/3802-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
gitlab.freedesktop.org/xorg/xserver/commit/50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330eX Refsource CONFIRMPatchThird Party Advisory
www.exploit-db.com/exploits/45697/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHSA-2018:3410Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.securityfocus.com/bid/105741VDB EntryX Refsource BIDThird Party Advisory
www.exploit-db.com/exploits/45908/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.htmlX Refsource MISCExploitThird Party Advisory

Show all 39 references

www.exploit-db.com/exploits/46142/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
security.gentoo.org/glsa/201810-09Vendor AdvisoryX Refsource GENTOOThird Party Advisory
www.securitytracker.com/id/1041948VDB EntryX Refsource SECTRACKThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14665X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
www.exploit-db.com/exploits/45832/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
gitlab.freedesktop.org/xorg/xserver/commit/8a59e3b7dbb30532a7c3769c555e00d7c4301170X Refsource CONFIRMPatchThird Party Advisory
www.exploit-db.com/exploits/45938/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.debian.org/security/2018/dsa-4328Vendor AdvisoryX Refsource DEBIANThird Party Advisory
packetstormsecurity.com/files/154942/Xorg-X11-Server-SUID-modulepath-Privilege-Escalation.htmlX Refsource MISC
packetstormsecurity.com/files/155276/Xorg-X11-Server-Local-Privilege-Escalation.htmlX Refsource MISC
security.alpinelinux.org/vuln/CVE-2018-14665Advisory
advisories.mageia.org/MGASA-2018-0421.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=23757REPORT
www.openwall.com/lists/oss-security/2018/10/25/1WEB
www.suse.com/support/update/announcement/2018/suse-su-20183456-1/Advisory
bugzilla.suse.com/1078383REPORT
bugzilla.suse.com/1111697REPORT
www.suse.com/security/cve/CVE-2018-14665WEB
www.suse.com/support/update/announcement/2018/suse-su-20183680-1/Advisory
bugzilla.suse.com/1112020REPORT
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1637761REPORT
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3410.jsonAdvisory
access.redhat.com/security/cve/CVE-2018-14665REPORT
www.cve.org/CVERecord?id=CVE-2018-14665AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2018-14665Advisory
ubuntu.com/security/CVE-2018-14665REPORT
ubuntu.com/security/notices/USN-3802-1Advisory
security-tracker.debian.org/tracker/CVE-2018-14665Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities