High severity7.0NVD Advisory· Published May 26, 2021· Updated Jun 17, 2026
CVE-2020-25697
CVE-2020-25697
Description
A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the server it is expecting to connect to.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
25- Xorg/Xorg-x11-serverdescription
- osv-coords23 versionspkg:apk/chainguard/gtfpkg:apk/chainguard/Xnestpkg:apk/chainguard/xorg-serverpkg:apk/chainguard/xorg-server-commonpkg:apk/chainguard/xorg-server-devpkg:apk/chainguard/xorg-server-docpkg:apk/chainguard/Xvfbpkg:apk/chainguard/xvfb-runpkg:apk/wolfi/gtfpkg:apk/wolfi/Xnestpkg:apk/wolfi/xorg-serverpkg:apk/wolfi/xorg-server-commonpkg:apk/wolfi/xorg-server-devpkg:apk/wolfi/xorg-server-docpkg:apk/wolfi/Xvfbpkg:apk/wolfi/xvfb-runpkg:rpm/opensuse/xtrans&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/xtrans&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/xtrans&distro=openSUSE%20Tumbleweedpkg:rpm/suse/xtrans&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/xtrans&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/xtrans&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3pkg:rpm/suse/xtrans&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 0+ 22 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.3.5-150000.3.3.1
- (no CPE)range: < 1.3.5-150000.3.3.1
- (no CPE)range: < 1.5.0-1.1
- (no CPE)range: < 1.3.5-150000.3.3.1
- (no CPE)range: < 1.3.5-150000.3.3.1
- (no CPE)range: < 1.3.5-150000.3.3.1
- (no CPE)range: < 1.3.5-5.3.1
Patches
Vulnerability mechanics
References
4- www.openwall.com/lists/oss-security/2020/11/09/3nvdMailing ListThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- seclists.org/oss-sec/2020/q4/105nvdMailing ListThird Party Advisory
- lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3Envd
News mentions
0No linked articles in our index yet.