Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13093
HistoryJan 15, 2019 - 9:25 a.m.

Arbitrary Code Execution

2019-01-1509:25:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.041 Low

EPSS

Percentile

92.2%

xorg-x11-server is vulnerable to arbitrary code execution attacks. The vulnerability exists as a flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.

CPENameOperatorVersion
xorg-x11-servereq1.19.5__5.1.el7_5

References