Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.1.2.2020.2302
Category:Huawei EulerOS Local Security Checks
Title:Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2020-2302)
Summary:The remote host is missing an update for the Huawei EulerOS 'xorg-x11-server' package(s) announced via the EulerOS-SA-2020-2302 advisory.
Description:Summary:
The remote host is missing an update for the Huawei EulerOS 'xorg-x11-server' package(s) announced via the EulerOS-SA-2020-2302 advisory.

Vulnerability Insight:
A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.(CVE-2020-14347)

Affected Software/OS:
'xorg-x11-server' package(s) on Huawei EulerOS V2.0SP5.

Solution:
Please install the updated package(s).

CVSS Score:
2.1

CVSS Vector:
AV:L/AC:L/Au:N/C:P/I:N/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2020-14347
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14347
Debian Security Information: DSA-4758 (Google Search)
https://www.debian.org/security/2020/dsa-4758
https://security.gentoo.org/glsa/202012-01
https://lists.x.org/archives/xorg-announce/2020-July/003051.html
https://www.openwall.com/lists/oss-security/2020/07/31/2
https://lists.debian.org/debian-lts-announce/2020/08/msg00057.html
SuSE Security Announcement: openSUSE-SU-2020:1279 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00066.html
SuSE Security Announcement: openSUSE-SU-2020:1302 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00075.html
https://usn.ubuntu.com/4488-1/
https://usn.ubuntu.com/4488-2/
CopyrightCopyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.