PT-2020-6012 · X.Org+8 · X.Org Server+8
Jan-Niklas Sohn
·
Published
2020-08-25
·
Updated
2024-06-15
·
CVE-2020-14345
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
X.Org Server versions prior to 1.20.9
Description
A flaw was found in the X.Org Server, specifically in the
XkbSetNames function, which may lead to an Out-Of-Bounds access. This issue can result in a privilege escalation vulnerability, posing a threat to data confidentiality and integrity, as well as system availability. The vulnerability is related to a buffer data boundary operation in the xkb.c file of the X Window System Xorg-server. Exploitation of this vulnerability can allow an attacker to access confidential information or cause a denial of service.Recommendations
For versions prior to 1.20.9, update to version 1.20.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the
XkbSetNames function until a patch is available.Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu
X.Org Server