CVE-2020-25697: High severity red hat xorg-x11-server-xorg vulnerability
A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the server it is expecting to connect to.
Other sources
While X11 servers authenticate their clients, X11 clients do not authenticate the server. This can be exploited to take control of an X application by impersonating the server it is expecting to connect to.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-25697?
CVE-2020-25697 is a privilege escalation vulnerability found in the Xorg-x11-server due to a lack of authentication for X11 clients.
What is the severity of CVE-2020-25697?
CVE-2020-25697 has a severity rating of high.
How does CVE-2020-25697 work?
CVE-2020-25697 allows an attacker to take control of an X application by impersonating the server it is expecting to connect to.
Which software is affected by CVE-2020-25697?
X.Org X Server is affected by CVE-2020-25697.
How can I fix CVE-2020-25697?
Ensure that you have the latest version of Xorg-x11-server installed, as the fix for CVE-2020-25697 may be included in an update.