USN-4488-1: xorg-server Ubuntu
Vulnerability summary
USN-4488-1 is a vulnerability in xorg-server Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 02-09-2020PublishedVulnerability first disclosed.
- 22-04-2026Last modifiedVulnerability information updated.
Description
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerabilities Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the input extension protocol. A local attacker could possibly use this issue to escalate privileges. (CVE-2020-14346) Jan-Niklas Sohn discovered that the X.Org X Server incorrectly initialized memory. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2020-14347) Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the XkbSelectEvents function. A local attacker could possibly use this issue to escalate privileges. (CVE-2020-14361) Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the XRecordRegisterClients function. A local attacker could possibly use this issue to escalate privileges. (CVE-2020-14362)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu3 products
- xorg-server< 2:1.18.4-0ubuntu0.9 | < 2:1.19.6-1ubuntu4.5 | < 2:1.20.8-2ubuntu2.3
- xorg-server-hwe-16.04< 2:1.19.6-1ubuntu4.1~16.04.3
- xorg-server-hwe-18.04< 2:1.20.8-2ubuntu2.2~18.04.2
1 vendor · 3 products