CVE-2020-14363
Summary
| CVE | CVE-2020-14363 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-09-11 18:15:00 UTC |
| Updated | 2023-11-07 03:17:00 UTC |
| Description | An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to confidentiality, integrity as well as system availability. |
Risk And Classification
Problem Types: CWE-190
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [SECURITY] Fedora 33 Update: libX11-1.6.12-1.fc33 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| Exploits/x11doublefree.sh at master · Ruia-ruia/Exploits · GitHub | MISC | github.com | |
| Exploits/DFX11details.txt at master · Ruia-ruia/Exploits · GitHub | MISC | github.com | |
| [SECURITY] Fedora 33 Update: libX11-1.6.12-1.fc33 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| 1872473 – (CVE-2020-14363) CVE-2020-14363 libX11: integer overflow leads to double free in locale handling | CONFIRM | bugzilla.redhat.com | Issue Tracking, Third Party Advisory |
| X.Org libX11 security advisory: August 25, 2020 | MISC | lists.x.org | Vendor Advisory |
| USN-4487-2: libx11 vulnerabilities | Ubuntu security notices | Ubuntu | UBUNTU | usn.ubuntu.com | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159217 Oracle Enterprise Linux Security Update for userspace graphics, xorg-x11, and mesa (ELSA-2021-1804)
- 239300 Red Hat Update for userspace graphics, xorg-x11, and mesa (RHSA-2021:1804)
- 352377 Amazon Linux Security Advisory for libX11: AL2012-2020-330
- 377028 Alibaba Cloud Linux Security Update for libx11 (ALINUX2-SA-2020:0177)
- 377380 Alibaba Cloud Linux Security Update for userspace graphics, xorg-x11, and mesa (ALINUX3-SA-2022:0087)
- 377568 Alibaba Cloud Linux Security Update for userspace graphics, xorg-x11, and mesa (ALINUX3-SA-2022:0114)
- 378324 Virtuozzo Linux Security Update for libX11 (VZLSA-2020:4946)
- 500334 Alpine Linux Security Update for libx11
- 504098 Alpine Linux Security Update for libx11
- 690433 Free Berkeley Software Distribution (FreeBSD) Security Update for libx11 (8da79498-e6f6-11ea-8cbf-54e1ad3d6335)
- 940098 AlmaLinux Security Update for userspace (ALSA-2021:1804)
- 960449 Rocky Linux Security Update for userspace (RLSA-2021:1804)