It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1475 advisory.

    A flaw was found in X.Org Server. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege     escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and     integrity as well as system availability. (CVE-2020-14345)

    A flaw was found in xorg-x11-server. A integer underflow in the X input extension protocol decoding in the     X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to     data confidentiality and integrity as well as system availability. (CVE-2020-14346)

    A flaw was found in X.Org Server. An Integer underflow leading to heap-buffer overflow may lead to a     privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality     and integrity as well as system availability. (CVE-2020-14361)

    A flaw was found in X.Org Server. An Integer underflow leading to heap-buffer overflow may lead to a     privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality     and integrity as well as system availability. (CVE-2020-14362)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux AMI : xorg-x11-server (ALAS-2021-1475)

high Nessus Plugin ID 144991

Version 1.3