CVE-2018-14665

Published: Oct 25, 2018Modified: Aug 29, 2025

6.6

Vector

CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.7 / Impact: 5.9

Source: NVD

Description

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.

Affected (11)

Products: X.org: X Server · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation · Canonical: Ubuntu Linux · +1 more

Show all products

X.org: X Server · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation · Canonical: Ubuntu Linux · Debian: Debian Linux

X.org

1 product

X Server

Redhat

6 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Server Tus

Enterprise Linux Workstation

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
X.org X Server	Before 1.20.3

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Eus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Workstation	Version 7.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 18.10

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 9.0

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (40)

http://packetstormsecurity.com/files/154942/Xorg-X11-Server-SUID-modulepath-Privilege-Escalation.html

Source: secalert@redhat.com

http://packetstormsecurity.com/files/155276/Xorg-X11-Server-Local-Privilege-Escalation.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/105741

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041948

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2018:3410

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14665

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://gitlab.freedesktop.org/xorg/xserver/commit/50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e

Source: secalert@redhat.com

PatchThird Party Advisory

https://gitlab.freedesktop.org/xorg/xserver/commit/8a59e3b7dbb30532a7c3769c555e00d7c4301170

Source: secalert@redhat.com

PatchThird Party Advisory

https://lists.x.org/archives/xorg-announce/2018-October/002927.html

Source: secalert@redhat.com

MitigationPatchVendor Advisory

https://security.gentoo.org/glsa/201810-09

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/3802-1/

Source: secalert@redhat.com

Third Party Advisory

https://www.debian.org/security/2018/dsa-4328

Source: secalert@redhat.com

Third Party Advisory

https://www.exploit-db.com/exploits/45697/

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/45742/

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/45832/

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/45908/

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/45922/

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/45938/

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/46142/

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

https://www.securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.html

Source: secalert@redhat.com

ExploitThird Party Advisory

http://packetstormsecurity.com/files/154942/Xorg-X11-Server-SUID-modulepath-Privilege-Escalation.html