CVE-2020-14363

Katalog CVE

CVSS 7.8 · High EPSS 0,58%

Kerentanan Integer Overflow or Wraparound pada x.org libx11, fedoraproject fedora. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to confidentiality, integrity as well as system availability.

Rincian

Terbit di NVD

11 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound
CWE-416: Use After Free

EPSS (30 hari)

0,58% peluang dieksploitasi; lebih tinggi dari 45,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.x.org/archives/xorg-announce/2020-August/003056.html advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14363 issue tracking · advisory pihak ketiga
• https://github.com/Ruia-ruia/Exploits/blob/master/DFX11details.txt advisory pihak ketiga
• https://github.com/Ruia-ruia/Exploits/blob/master/x11doublefree.sh exploit · advisory pihak ketiga
• https://usn.ubuntu.com/4487-2/ advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7AVXCQOSCAPKY...