60
CVE-2018-14665
PoC ×8—CVSS 3.0
6.6 medium
EPSS
27%p98
Published
()
Modified
Description
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
- Vendors
- x.orgredhatcanonicaldebian
- Products
- x server, enterprise linux desktop, enterprise linux server, enterprise linux server aus, enterprise linux server eus, enterprise linux server tus, enterprise linux workstation, ubuntu linux, debian linux
- Weakness
- CWE-863
- Vector
- CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H