CVE-2020-14363 — Integer Overflow or Wraparound in Libx11
Severity
7.8HIGHNVD
OSV6.7
EPSS
0.1%
top 64.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 11
Latest updateMay 24
Description
An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to confidentiality, integrity as well as system availability.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages4 packages
Also affects: Fedora 33
🔴Vulnerability Details
5GHSA▶
GHSA-qmwg-hw9q-xg39: An integer overflow vulnerability leading to a double-free was found in libX11↗2022-05-24
CVEList▶
CVE-2020-14363: An integer overflow vulnerability leading to a double-free was found in libX11↗2020-09-11
OSV▶
CVE-2020-14363: An integer overflow vulnerability leading to a double-free was found in libX11↗2020-09-11