PT-2020-6013 · X.Org+8 · Libx11+8

Published 2020-08-25 · Updated 2026-05-07 · CVE-2020-14363

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libX11 (affected versions not specified)

Description The issue is related to an integer overflow vulnerability leading to a double-free in libX11, which can cause an application compiled with libX11 to crash or result in arbitrary code execution. This flaw poses a significant threat to confidentiality, integrity, and system availability. A local privileged attacker can exploit this vulnerability, potentially leading to a denial of service or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Integer Overflow

Weakness Enumeration

CWE-416

CWE-190

Related Identifiers

ALSA-2021:1804

ALT-PU-2020-2669

ALT-PU-2020-2836

ALT-PU-2021-1868

ALT-PU-2021-2344

BDU:2021-02599

CESA-2020_4908

CESA-2020_4946

CESA-2021_1804

CVE-2020-14363

DLA-2361-1

JLSEC-2026-470

MGASA-2020-0349

OPENSUSE-SU-2020:1368-1

OPENSUSE-SU-2020:1370-1

OPENSUSE-SU-2020_1368-1

OPENSUSE-SU-2020_1370-1

OPENSUSE-SU-2024:10918-1

RHSA-2020:4908

RHSA-2020:4946

RHSA-2020_4908

RHSA-2020_4946

RHSA-2021:1804

RHSA-2021_1804

RLSA-2021:1804

SUSE-SU-2020:2474-1

SUSE-SU-2020:2474-2

SUSE-SU-2020:2475-1

SUSE-SU-2020:2475-2

SUSE-SU-2020_2474-1

SUSE-SU-2020_2474-2

SUSE-SU-2020_2475-1

SUSE-SU-2020_2475-2

USN-4487-1

USN-4487-2

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Libx11

References · 92

• 🔥 https://github.com/Ruia-ruia/Exploits/blob/master/x11doublefree.sh · Exploit
• 🔥 https://github.com/Ruia-ruia/Exploits/blob/master/DFX11details.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-14363 · Security Note
• https://lists.x.org/archives/xorg-announce/2020-August/003056.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2021:1804 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-1804.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2021:1804 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2020-14363 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-4908.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2474-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2474-2 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2021-1804.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7AVXCQOSCAPKYYHFIJAZ6E2C7LJBTLXF · Vendor Advisory
• https://usn.ubuntu.com/4487-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4487-1 · Vendor Advisory