This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-14665 →

DEBIAN-CVE-2018-14665

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server all...

Original description

The description as published by the source.

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 xorg-server

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.3-1"}]}]

Debian:13 xorg-server

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.3-1"}]}]

Debian:14 xorg-server

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.3-1"}]}]

References

advisory security-tracker.debian.org