ALBA-2020:5504 xorg-x11-server bug fix and enhancement update
A bug in the X.Org modesetting driver causes a crash when handling missing connectors, leading to a local denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is ALBA-2020:5504?
ALBA-2020:5504 is a denial of service vulnerability in xorg-x11-server-devel, published on 15 Dec 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.
Bug Fix(es) and Enhancement(s):
- [DELL 8.2 BUG]The modesetting driver does not gracefully handle missing connectors on EnterVT (BZ#1883491)
Which versions are affected by ALBA-2020:5504?
Linux distribution packages (2)
xorg-x11-server-devel AlmaLinux:8 | All versions | 1.20.8-6.1.el8_3 |
xorg-x11-server-source AlmaLinux:8 | All versions | 1.20.8-6.1.el8_3 |
How do I fix ALBA-2020:5504?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is ALBA-2020:5504 being exploited?
There is no known exploitation of ALBA-2020:5504 in the wild and no public exploit code.