X.Org X Server: Privilege escalation

X.Org X Server: Privilege escalation A vulnerability in X.Org X Server allows local users to escalate privileges. xorg x server 2018-10-30 2018-10-30 669588 local 1.20.3 1.20.3

The X Window System is a graphical windowing system based on a client/server model.

An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.

A local attacker can escalate privileges to root by passing crafted parameters to the X.org X server.

There is no known workaround at this time.

All X.Org X Server users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=x11-base/xorg-server-1.20.3"

CVE-2018-14665 whissi whissi