BDU%3A2018-01290 — Vulnetix

BDU%3A2018-01290 PUBLISHED CVSS 7.199999809265137 HIGH

Уязвимость программного пакета X.Org Server, вызванная ошибками при обработке и проверке параметров командной строки, позволяющая нарушителю получить привилегии root и перезаписать произвольный файл в операционной системе

Risk Scores

CVSS 2.0

7.199999809265137

Affected Products

Vendor	Product	Versions
X.Org Foundation, ООО «РусБИТех-Астра»	X.Org Server, Astra Linux Special Edition (запись в едином реестре российских программ №369)
n/a	n/a	n/a

Timeline

Oct 29, 2018 PoC Published
Oct 31, 2018 CVE Published
Nov 22, 2018 PoC Published
Nov 26, 2018 PoC Published
Oct 22, 2019 PoC Published
Nov 11, 2019 PoC Published
Nov 20, 2019 PoC Published
Feb 6, 2025 PoC Published
Feb 23, 2025 PoC Published
Sep 10, 2025 CVE Updated
Apr 17, 2026 Distribution Patch
Apr 17, 2026 Distribution Patch

References

https://lists.x.org/archives/xorg-announce/2018-October/002927.html url
https://nvd.nist.gov/vuln/detail/CVE-2018-14665 url
https://securityaffairs.co/wordpress/77402/hacking/cve-2018-14665-linux-distros.html url
http://www.opennet.ru/opennews/art.shtml?num=49500 url
https://security-tracker.debian.org/tracker/CVE-2018-14665 url
https://www.exploit-db.com/exploits/46142/ url
45742 exploit
45922 exploit
USN-3802-1 vendor-advisory
https://gitlab.freedesktop.org/xorg/xserver/commit/50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e url
45697 exploit
RHSA-2018:3410 vendor-advisory
105741 vdb
45908 exploit
https://www.securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.html url
GLSA-201810-09 vendor-advisory
1041948 vdb
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14665 url
45832 exploit
https://gitlab.freedesktop.org/xorg/xserver/commit/8a59e3b7dbb30532a7c3769c555e00d7c4301170 url

…and 4 more

Open in Interactive Console →