A vulnerability classified as critical was found in X.org X11 Server up to 1.20.8 (Windowing System Software). This vulnerability affects some unknown functionality. The manipulation with an unknown input leads to a integer overflow vulnerability. The CWE definition for the vulnerability is CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

The weakness was shared 09/15/2020 as Bug 1869144 as not defined bug report (Bugzilla). The advisory is available at bugzilla.redhat.com. This vulnerability was named CVE-2020-14362 since 06/17/2020. Local access is required to approach this attack. A single authentication is required for exploitation. The technical details are unknown and an exploit is not available.

Upgrading to version 1.20.9 eliminates this vulnerability.

The entries 161253, 161252 and 161251 are related to this item.

Productinfo

Type

• Windowing System Software

Vendor

• X.org

Name

• X11 Server

Version

• 1.20.0
• 1.20.1
• 1.20.2
• 1.20.3
• 1.20.4
• 1.20.5
• 1.20.6
• 1.20.7
• 1.20.8

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion