Vulnerability · Published Sep 11, 2020 · Assigned by redhat
CVE-2020-14363
High 7.8
In plain English
A high-severity integer overflow in libX11 from The X11 Project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to confidentiality, integrity as well as system availability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | libglvnd | 1:1.3.2-1.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | libglvnd-core-devel | 1:1.3.2-1.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | libglvnd-devel | 1:1.3.2-1.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | libglvnd-egl | 1:1.3.2-1.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | libglvnd-gles | 1:1.3.2-1.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | libglvnd-glx | 1:1.3.2-1.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | libglvnd-opengl | 1:1.3.2-1.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | libinput-devel | 1.16.3-1.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | libwacom-devel | 1.6-2.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | mesa-libOSMesa-devel | 20.3.3-2.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | mesa-libgbm-devel | 20.3.3-2.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | xorg-x11-drivers | 7.7-30.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | xorg-x11-server-devel | 1.20.10-1.el8 | ALSA-2021:1804 |
| AlmaLinux:8 | xorg-x11-server-source | 1.20.10-1.el8 | ALSA-2021:1804 |
| Alpine:v3.20 | libx11 | 1.6.12-r0 | ALPINE-CVE-2020-14363 |
| Alpine:v3.21 | libx11 | 1.6.12-r0 | ALPINE-CVE-2020-14363 |
| Alpine:v3.22 | libx11 | 1.6.12-r0 | ALPINE-CVE-2020-14363 |
| Alpine:v3.23 | libx11 | 1.6.12-r0 | ALPINE-CVE-2020-14363 |
| Alpine:v3.24 | libx11 | 1.6.12-r0 | ALPINE-CVE-2020-14363 |
| Debian:12 | libx11 | 2:1.6.12-1 | DEBIAN-CVE-2020-14363 |
| Debian:13 | libx11 | 2:1.6.12-1 | DEBIAN-CVE-2020-14363 |
| Debian:14 | libx11 | 2:1.6.12-1 | DEBIAN-CVE-2020-14363 |
| Rocky Linux:8 | egl-wayland | 0:1.1.5-3.el8 | RLSA-2021:1804 |
| Rocky Linux:8 | libX11 | 0:1.6.8-4.el8 | RLSA-2021:1804 |
| Rocky Linux:8 | libdrm | 0:2.4.103-1.el8 | RLSA-2021:1804 |
| Rocky Linux:8 | libglvnd | 1:1.3.2-1.el8 | RLSA-2021:1804 |
| Rocky Linux:8 | libinput | 0:1.16.3-1.el8 | RLSA-2021:1804 |
| Rocky Linux:8 | libwacom | 0:1.6-2.el8 | RLSA-2021:1804 |
| Rocky Linux:8 | mesa | 0:20.3.3-2.el8 | RLSA-2021:1804 |
| Rocky Linux:8 | xorg-x11-drivers | 0:7.7-30.el8 | RLSA-2021:1804 |
| Rocky Linux:8 | xorg-x11-server | 0:1.20.10-1.el8 | RLSA-2021:1804 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The X11 Project | libX11 | 1.6.12 |
Weakness: CWE-190, CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://github.com/Ruia-ruia/Exploits/blob/master/DFX11details.txt x_refsource_MISC
- https://github.com/Ruia-ruia/Exploits/blob/master/x11doublefree.sh x_refsource_MISC
- https://lists.x.org/archives/xorg-announce/2020-August/003056.html x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14363 x_refsource_CONFIRM
- USN-4487-2 vendor-advisory, x_refsource_UBUNTU
- FEDORA-2020-cf0afbd27e vendor-advisory, x_refsource_FEDORA