{"id":"CVE-2018-14665","details":"A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.","modified":"2026-08-07T14:58:16.508999Z","published":"2018-10-25T20:29:00.250Z","related":["SUSE-SU-2018:3456-1","SUSE-SU-2018:3680-1","openSUSE-SU-2024:11525-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"18.04"},{"last_affected":"18.04"},{"introduced":"18.10"},{"last_affected":"18.10"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux"},{"source":"CPE_STRING","vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"}]},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_aus"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_eus"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.6"},{"last_affected":"7.6"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_tus"}]},"references":[{"type":"WEB","url":"http://packetstormsecurity.com/files/154942/Xorg-X11-Server-SUID-modulepath-Privilege-Escalation.html"},{"type":"WEB","url":"http://packetstormsecurity.com/files/155276/Xorg-X11-Server-Local-Privilege-Escalation.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/105741"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1041948"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3410"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201810-09"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3802-1/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4328"},{"type":"FIX","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14665"},{"type":"FIX","url":"https://gitlab.freedesktop.org/xorg/xserver/commit/50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e"},{"type":"FIX","url":"https://gitlab.freedesktop.org/xorg/xserver/commit/8a59e3b7dbb30532a7c3769c555e00d7c4301170"},{"type":"FIX","url":"https://lists.x.org/archives/xorg-announce/2018-October/002927.html"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/45697/"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/45742/"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/45832/"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/45908/"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/45922/"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/45938/"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/46142/"},{"type":"EVIDENCE","url":"https://www.securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.freedesktop.org/xorg/xserver","events":[{"introduced":"0"},{"fixed":"971d418113740cae2d7d393850bad4926d1a7e86"},{"introduced":"0d7ec5c7d9b451066a079fe56bcc9722341a91ff"},{"last_affected":"0d7ec5c7d9b451066a079fe56bcc9722341a91ff"},{"fixed":"50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e"},{"fixed":"8a59e3b7dbb30532a7c3769c555e00d7c4301170"}],"database_specific":{"cpe":["cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"fixed":"1.20.3"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"]}}],"versions":["7.0","xorg-server-1.20.2","xorg-server-1.20.1","xorg-server-1.20.0","xorg-server-1.19.99.905","xorg-server-1.19.99.904","xorg-server-1.19.99.903","xorg-server-1.19.99.902","xorg-server-1.19.99.901","xorg-server-1.19.0","xorg-server-1.18.99.902","xorg-server-1.18.99.901","xorg-server-1.18.99.2","xorg-server-1.18.0","xorg-server-1.17.99.902","xorg-server-1.17.99.901","xorg-server-1.17.0","xorg-server-1.16.99.902","xorg-server-1.16.99.901","xorg-server-1.16.0","xorg-server-1.15.99.904","xorg-server-1.15.99.903","xorg-server-1.15.99.902","xorg-server-1.15.99.901","xorg-server-1.15.0","xorg-server-1.14.99.905","xorg-server-1.14.99.904","xorg-server-1.14.99.903","xorg-server-1.14.99.902","xorg-server-1.14.99.901","xorg-server-1.14.99.3","xorg-server-1.14.99.2","xorg-server-1.14.99.1","xorg-server-1.14.0","xorg-server-1.13.99.902","xorg-server-1.13.99.901","xorg-server-1.13.0","xorg-server-1.12.99.905","xorg-server-1.12.99.904","xorg-server-1.12.99.903","xorg-server-1.12.99.902","xorg-server-1.12.99.901","xorg-server-1.12.0","xorg-server-1.11.99.903","xorg-server-1.11.99.902","xorg-server-1.11.99.901","xorg-server-1.11.99.1","xorg-server-1.11.0","xorg-server-1.10.99.902","xorg-server-1.10.99.901","xorg-server-1.10.0","xorg-server-1.9.99.903","xorg-server-1.9.99.902","xorg-server-1.9.99.901","xorg-server-1.9.0","xorg-server-1.8.99.906","xorg-server-1.8.99.905","xorg-server-1.8.99.904","xorg-server-1.8.99.903","xorg-server-1.8.99.902","xorg-server-1.8.99.901","xorg-server-1.8.0","xorg-server-1.7.99.902","xorg-server-1.7.99.901","xorg-server-1.7.99.2","xorg-server-1.7.99.1","xorg-server-1.6.99.901","xorg-server-1.6.99.900","xorg-server-1.5.99.1","xorg-server-1.1.99.3","xorg-server-1_1_99_2","xorg-server-1_0_99_901","XORG-7_0_99_901","xorg-server-1_1_99_1","xorg-server-1_0_99_2","xorg-server-1_0_99_1","XORG-7_0","pre-xgldrop-merge"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-14665.json","vanir_signatures_modified":"2026-08-07T14:58:16Z","vanir_signatures":[{"target":{"file":"hw/xfree86/common/xf86Init.c","function":"ddxProcessArgument"},"deprecated":false,"digest":{"function_hash":"315373064620892594551951638009703833680","length":6630},"id":"CVE-2018-14665-22639977","signature_type":"Function","signature_version":"v1","source":"https://gitlab.freedesktop.org/xorg/xserver@8a59e3b7dbb30532a7c3769c555e00d7c4301170"},{"signature_type":"Line","signature_version":"v1","source":"https://gitlab.freedesktop.org/xorg/xserver@50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e","target":{"file":"hw/xfree86/common/xf86Init.c"},"deprecated":false,"digest":{"line_hashes":["65873069307278292652010531175368615420","284923232927484381038688238309080919142","27624637168183375727967830732217204166","235860324613668966512981938403285548298","183732425723223922100410593710392118164","114508074504614284615304547286231225643","315439724826352396352105082473061468447","212627248673392263212831660654490005750","95330500942765008061279670440426547946","56839145749456828219969817469731032700","213388443174132321590396988505480979115"],"threshold":0.9},"id":"CVE-2018-14665-6550486b"},{"deprecated":false,"digest":{"line_hashes":["65873069307278292652010531175368615420","284923232927484381038688238309080919142","27624637168183375727967830732217204166","235860324613668966512981938403285548298","183732425723223922100410593710392118164","114508074504614284615304547286231225643","315439724826352396352105082473061468447","212627248673392263212831660654490005750","95330500942765008061279670440426547946","56839145749456828219969817469731032700","213388443174132321590396988505480979115"],"threshold":0.9},"id":"CVE-2018-14665-78795323","signature_type":"Line","signature_version":"v1","source":"https://gitlab.freedesktop.org/xorg/xserver@8a59e3b7dbb30532a7c3769c555e00d7c4301170","target":{"file":"hw/xfree86/common/xf86Init.c"}},{"source":"https://gitlab.freedesktop.org/xorg/xserver@50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e","target":{"file":"hw/xfree86/common/xf86Init.c","function":"ddxProcessArgument"},"deprecated":false,"digest":{"function_hash":"183506005408712373153446637987835782518","length":6537},"id":"CVE-2018-14665-9355e2b1","signature_type":"Function","signature_version":"v1"}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}