PT-2020-5333 · X.Org+8 · X.Org Server+8
Jan-Niklas Sohn
·
Published
2020-08-25
·
Updated
2024-06-15
·
CVE-2020-14361
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
X.Org Server versions prior to 1.20.9
Description
A flaw was found in the X.Org Server, related to an integer underflow in the
SProcXkbSelectEvents function, which can lead to a heap-buffer overflow. This issue may result in a privilege escalation vulnerability, posing a threat to data confidentiality and integrity, as well as system availability. The vulnerability allows an attacker to access confidential data, compromise its integrity, and cause a denial of service.Recommendations
For versions prior to 1.20.9, update to version 1.20.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the
SProcXkbSelectEvents function in the xkbSwap.c file until a patch is available.Exploit
Fix
Integer Overflow
Integer Underflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu
X.Org Server