← Zuruck zu CVEs

CVE-2020-14346

HIGH

7.8

Beschreibung

A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVE Details

CVSS v3.1 Bewertung7.8

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht9/15/2020

Zuletzt geandert8/29/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

canonical:ubuntu_linuxredhat:enterprise_linuxx.org:x_server

Schwachen (CWE)

CWE-191CWE-191

Referenzen

https://bugzilla.redhat.com/show_bug.cgi?id=1862246(secalert@redhat.com)

https://lists.x.org/archives/xorg-announce/2020-August/003058.html(secalert@redhat.com)

https://security.gentoo.org/glsa/202012-01(secalert@redhat.com)

https://usn.ubuntu.com/4488-2/(secalert@redhat.com)

https://www.zerodayinitiative.com/advisories/ZDI-20-1417/(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=1862246(af854a3a-2127-422b-91ae-364da2661108)

https://lists.x.org/archives/xorg-announce/2020-August/003058.html(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/202012-01(af854a3a-2127-422b-91ae-364da2661108)

https://usn.ubuntu.com/4488-2/(af854a3a-2127-422b-91ae-364da2661108)

https://www.zerodayinitiative.com/advisories/ZDI-20-1417/(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.