Homepage
About Snyk

Missing Authentication for Critical Function The advisory has been revoked - it doesn't affect any version of package libx11 Open this link in a new tab

    Threat Intelligence

    EPSS 0.05% (14th percentile)
Expand this section
NVD
7 high
Expand this section
Red Hat
7 high
Expand this section
SUSE
3.6 low

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-UBUNTU1804-LIBX11-1040676
  • published 17 Nov 2020
  • disclosed 26 May 2021
Report a new vulnerability Found a mistake?

Introduced: 17 Nov 2020

CVE-2020-25697 Open this link in a new tab
CWE-306 Open this link in a new tab

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:18.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream libx11 package and not the libx11 package as distributed by Ubuntu.

A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the server it is expecting to connect to.