- Vulnerability/
- USN-3802-1
USN-3802-1: X.Org X server vulnerability
First published: Fri Oct 26 2018(Updated: )
Narendra Shinde discovered that the X.Org X server incorrectly handled certain command line parameters when running as root with the legacy wrapper. When certain graphics drivers are being used, a local attacker could possibly use this issue to overwrite arbitrary files and escalate privileges.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/xserver-xorg-core | <2:1.20.1-3ubuntu2.1 | 2:1.20.1-3ubuntu2.1 |
| =18.10 | ||
| All of | ||
| ubuntu/xserver-xorg-core | <2:1.19.6-1ubuntu4.2 | 2:1.19.6-1ubuntu4.2 |
| =18.04 | ||
| All of | ||
| ubuntu/xserver-xorg-core-hwe-16.04 | <2:1.19.6-1ubuntu4.1~16.04.2 | 2:1.19.6-1ubuntu4.1~16.04.2 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2018-14665
- https://launchpad.net/ubuntu/+source/xorg-server/2:1.20.1-3ubuntu2.1
- https://launchpad.net/ubuntu/+source/xorg-server/2:1.19.6-1ubuntu4.2
- https://launchpad.net/ubuntu/+source/xorg-server-hwe-16.04/2:1.19.6-1ubuntu4.1~16.04.2
- https://ubuntu.com/security/notices/USN-3802-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this X.Org X server vulnerability?
USN-3802-1
What is the impact of the USN-3802-1 vulnerability?
A local attacker could exploit this vulnerability to overwrite arbitrary files and escalate privileges.
Which versions of Ubuntu are affected by the USN-3802-1 vulnerability?
Ubuntu 18.10, Ubuntu 18.04, and Ubuntu 16.04 are affected.
How can I fix the USN-3802-1 vulnerability?
Update xserver-xorg-core package to version 2:1.20.1-3ubuntu2.1 for Ubuntu 18.10, version 2:1.19.6-1ubuntu4.2 for Ubuntu 18.04, and version 2:1.19.6-1ubuntu4.1~16.04.2 for Ubuntu 16.04.
Where can I find more information about the USN-3802-1 vulnerability?
You can find more information about the USN-3802-1 vulnerability on the Ubuntu security website.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/18.10
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04