CVE-2018-14665
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath...
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
- Record
CVE-2018-14665- CVSS 3.0
- 6.6 Medium
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-863
- Updated
- 2026-11-02
CVE List No score
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
- Record
CVE-2018-14665- Updated
- 2026-11-02
EUVDEUVD-2018-6560 No score
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
- Record
EUVD-2018-6560- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c34f-6cmx-fcvv
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath...
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
- Record
GHSA-c34f-6cmx-fcvv- CVSS 3.0
- 6.6 Medium
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-02
OSVALPINE-CVE-2018-14665
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
- Record
ALPINE-CVE-2018-14665- CVSS 3.0
- 6.6 Medium
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2018-14665
CVE-2018-14665 does not affect BellSoft software
- Record
BELL-CVE-2018-14665- CVSS 3.0
- 6.6 Medium
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 9 moreShow less
OSV
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
- Record
CVE-2018-14665- CVSS 3.0
- 6.6 Medium
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-14665
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
- Record
DEBIAN-CVE-2018-14665- CVSS 3.0
- 6.6 Medium
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:3410
Red Hat Security Advisory: xorg-x11-server security update
- Record
RHSA-2018:3410- CVSS 3.0
- 6.6 Medium
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-14665
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
- Record
UBUNTU-CVE-2018-14665- CVSS 3.0
- 6.6 Medium
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2018-0421 No score
Updated x11-server packages fix security vulnerability
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges (CVE-2018-14665).
- Record
MGASA-2018-0421- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11525-1 No score
xorg-x11-server-1.20.13-1.2 on GA media
These are all security issues fixed in the xorg-x11-server-1.20.13-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11525-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:3456-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server provides the following fix:
Security issue fixed:
- CVE-2018-14665: Local attackers could overwrite system files in any directory using the -logfile option and gain privileges (bsc#1111697)
Non security issues fixed:
- Do not write past the allocated buffer. (bsc#1078383)
- Record
SUSE-SU-2018:3456-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:3680-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
-
CVE-2018-14665: Disable -logfile and -modulepath when running with elevated privileges (bsc#1112020,
Note that SUSE by default does not run with elevated privileges, so the default installation is not affected by this problem.
- Record
SUSE-SU-2018:3680-1- Updated
- 2026-11-02
OSVUSN-3802-1 No score
xorg-server, xorg-server-hwe-16.04 vulnerability
Narendra Shinde discovered that the X.Org X server incorrectly handled certain command line parameters when running as root with the legacy wrapper. When certain graphics drivers are being used, a local attacker could possibly use this issue to overwrite arbitrary files and escalate privileges.
- Record
USN-3802-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xorg-serverAlpine:v3.10 |
before 1.20.3-r0 | 1.20.3-r0 |
xorg-serverAlpine:v3.11 |
before 1.20.3-r0 | 1.20.3-r0 |
xorg-serverAlpine:v3.12 |
before 1.20.3-r0 | 1.20.3-r0 |
xorg-serverAlpine:v3.6 |
before 1.19.5-r1 | 1.19.5-r1 |
xorg-serverAlpine:v3.7 |
before 1.19.5-r1 | 1.19.5-r1 |
xorg-serverAlpine:v3.8 |
before 1.19.6-r3 | 1.19.6-r3 |
xorg-serverAlpine:v3.9 |
before 1.20.3-r0 | 1.20.3-r0 |
xorg-serverDebian:12 |
before 2:1.20.3-1 | 2:1.20.3-1 |
xorg-serverDebian:13 |
before 2:1.20.3-1 | 2:1.20.3-1 |
xorg-serverDebian:14 |
before 2:1.20.3-1 | 2:1.20.3-1 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xorg-serverDebian:9 |
before 2:1.19.2-1+deb9u4, plus listed versions 2:1.19.2-12:1.19.2-1+deb9u12:1.19.2-1+deb9u22:1.19.2-1+deb9u3 |
2:1.19.2-1+deb9u4 |
x11-serverMageia:6 |
before 1.19.5-1.2.mga6 | 1.19.5-1.2.mga6 |
xorg-x11-serverRed Hat:enterprise_linux:7::client |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XephyrRed Hat:enterprise_linux:7::client |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XorgRed Hat:enterprise_linux:7::client |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-commonRed Hat:enterprise_linux:7::client |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XdmxRed Hat:enterprise_linux:7::client |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XnestRed Hat:enterprise_linux:7::client |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XvfbRed Hat:enterprise_linux:7::client |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XwaylandRed Hat:enterprise_linux:7::client |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-develRed Hat:enterprise_linux:7::client |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-sourceRed Hat:enterprise_linux:7::client |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-serverRed Hat:enterprise_linux:7::computenode |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XdmxRed Hat:enterprise_linux:7::computenode |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XephyrRed Hat:enterprise_linux:7::computenode |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XnestRed Hat:enterprise_linux:7::computenode |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XorgRed Hat:enterprise_linux:7::computenode |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XvfbRed Hat:enterprise_linux:7::computenode |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XwaylandRed Hat:enterprise_linux:7::computenode |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-commonRed Hat:enterprise_linux:7::computenode |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-develRed Hat:enterprise_linux:7::computenode |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-sourceRed Hat:enterprise_linux:7::computenode |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-serverRed Hat:enterprise_linux:7::server |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XephyrRed Hat:enterprise_linux:7::server |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XorgRed Hat:enterprise_linux:7::server |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-commonRed Hat:enterprise_linux:7::server |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XdmxRed Hat:enterprise_linux:7::server |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XnestRed Hat:enterprise_linux:7::server |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XvfbRed Hat:enterprise_linux:7::server |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XwaylandRed Hat:enterprise_linux:7::server |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-develRed Hat:enterprise_linux:7::server |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-sourceRed Hat:enterprise_linux:7::server |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-serverRed Hat:enterprise_linux:7::workstation |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XephyrRed Hat:enterprise_linux:7::workstation |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XorgRed Hat:enterprise_linux:7::workstation |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-commonRed Hat:enterprise_linux:7::workstation |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XdmxRed Hat:enterprise_linux:7::workstation |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XnestRed Hat:enterprise_linux:7::workstation |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XvfbRed Hat:enterprise_linux:7::workstation |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-XwaylandRed Hat:enterprise_linux:7::workstation |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-develRed Hat:enterprise_linux:7::workstation |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-server-sourceRed Hat:enterprise_linux:7::workstation |
before 0:1.20.1-5.1.el7 | 0:1.20.1-5.1.el7 |
xorg-x11-serverSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 7.4-27.122.21.1 | 7.4-27.122.21.1 |
xorg-x11-serverSUSE:Linux Enterprise Point of Sale 11 SP3 |
before 7.4-27.122.21.1 | 7.4-27.122.21.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 11 SP3-LTSS |
before 7.4-27.122.21.1 | 7.4-27.122.21.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 11 SP3-TERADATA |
before 7.4-27.122.21.1 | 7.4-27.122.21.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 11 SP4 |
before 7.4-27.122.21.1 | 7.4-27.122.21.1 |
xorg-x11-serverSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 7.4-27.122.21.1 | 7.4-27.122.21.1 |
xorg-x11-serverSUSE:Linux Enterprise Module for Basesystem 15 |
before 1.19.6-8.3.2 | 1.19.6-8.3.2 |
xorg-x11-serverSUSE:Linux Enterprise Module for Development Tools 15 |
before 1.19.6-8.3.2 | 1.19.6-8.3.2 |
xorg-x11-serverSUSE:Linux Enterprise Workstation Extension 15 |
before 1.19.6-8.3.2 | 1.19.6-8.3.2 |
xorg-server-hwe-16.04Ubuntu:16.04:LTS |
before 2:1.19.6-1ubuntu4.1~16.04.2, plus listed versions 2:1.18.4-1ubuntu6.1~16.04.12:1.18.4-1ubuntu6.1~16.04.22:1.19.3-1ubuntu1~16.04.22:1.19.3-1ubuntu1~16.04.32:1.19.3-1ubuntu1~16.04.42:1.19.5-0ubuntu2~16.04.12:1.19.6-1ubuntu4~16.04.12:1.19.6-1ubuntu4.1~16.04.1 |
2:1.19.6-1ubuntu4.1~16.04.2 |
xorg-serverUbuntu:18.04:LTS |
before 2:1.19.6-1ubuntu4.2, plus listed versions 2:1.19.5-0ubuntu22:1.19.6-1ubuntu12:1.19.6-1ubuntu22:1.19.6-1ubuntu32:1.19.6-1ubuntu42:1.19.6-1ubuntu4.1 |
2:1.19.6-1ubuntu4.2 |
xorg-x11-serveropenSUSE:Tumbleweed From an advisory covering 28 CVEs |
before 1.20.13-1.2 | 1.20.13-1.2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | xorg-x11-server < 1.20.3 - Local Privilege Escalation | 2018-10-25 |
| Metasploit | Xorg X11 Server Local Privilege Escalation | 2018-10-25 |
| Metasploit | Xorg X11 Server SUID logfile Privilege Escalation | 2018-10-25 |
| Metasploit | Xorg X11 Server SUID modulepath Privilege Escalation | 2018-10-25 |
| PoC in GitHub | jas502n/CVE-2018-14665 | 2018-10-27 |
| Exploit-DB | xorg-x11-server 1.20.3 - Privilege Escalation | 2018-10-30 |
| PoC in GitHub | bolonobolo/CVE-2018-14665 | 2018-11-02 |
| Exploit-DB | xorg-x11-server < 1.20.1 - Local Privilege Escalation | 2018-11-13 |
| Exploit-DB | Xorg X11 Server - SUID privilege escalation (Metasploit) | 2018-11-26 |
| Exploit-DB | xorg-x11-server < 1.20.3 - 'modulepath' Local Privilege Escalation | 2018-11-30 |
| Exploit-DB | Xorg X11 Server (AIX) - Local Privilege Escalation | 2018-12-04 |
| Exploit-DB | xorg-x11-server < 1.20.3 (Solaris 11) - 'inittab Local Privilege Escalation | 2019-01-14 |
| Exploit-DB | Xorg X11 Server - Local Privilege Escalation (Metasploit) | 2019-11-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-14665 is a medium vulnerability (CVSS 6.6) in X.org X Server, published October 25, 2018. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 27.2%, the 98th percentile. Fixed in xorg-server 1.20.3-r0.
References
exploit-db.com/exploits/45742
lists.x.org/archives/xorg-announce/2018-October/002927.html
usn.ubuntu.com/3802-1
gitlab.freedesktop.org/xorg/xserver/commit/50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e
Show 62 moreShow less
access.redhat.com/errata/RHSA-2018:3410
securityfocus.com/bid/105741
securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.html
security.gentoo.org/glsa/201810-09
securitytracker.com/id/1041948
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14665
debian.org/security/2018/dsa-4328
packetstormsecurity.com/files/154942/Xorg-X11-Server-SUID-modulepath-Privilege-Escalation.html
nvd.nist.gov/vuln/detail/CVE-2018-14665
github.com/advisories/GHSA-c34f-6cmx-fcvv
security.alpinelinux.org/vuln/CVE-2018-14665
docs.bell-sw.com/security/cves/CVE-2018-14665
security-tracker.debian.org/tracker/CVE-2018-14665
advisories.mageia.org/MGASA-2018-0421.html
bugs.mageia.org/show_bug.cgi?id=23757
openwall.com/lists/oss-security/2018/10/25/1
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3410.json
cve.org/CVERecord?id=CVE-2018-14665
suse.com/support/update/announcement/2018/suse-su-20183456-1
bugzilla.suse.com/1078383
ubuntu.com/security/CVE-2018-14665