Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:26088
HistoryAug 06, 2020 - 9:29 p.m.

Information Disclosure

2020-08-0621:29:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.0005 Low

EPSS

Percentile

18.1%

xserver is vulnerable to information disclosure. The vulnerability exists as a flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.