7.2

CVE-2018-14665

Exploit

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.

Data is provided by the National Vulnerability Database (NVD)
X.Org ≫ X Server Version < 1.20.3
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version18.10
Debian ≫ Debian Linux Version9.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.8% 0.876
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.6 0.7 5.9
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

http://www.securityfocus.com/bid/105741
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041948
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14665
Patch
Third Party Advisory
Issue Tracking
https://usn.ubuntu.com/3802-1/
Third Party Advisory
https://www.exploit-db.com/exploits/45697/
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/45742/
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/45832/
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/45908/
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/45922/
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/45938/
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/46142/
Third Party Advisory
Exploit
VDB Entry