Summary
Todd Carson discovered that libx11 incorrectly handled certain memory
operations. A local attacker could possibly use this issue to escalate
privileges. (CVE-2020-14344)
Jayden Rivers discovered that libx11 incorrectly handled locales. A local
attacker could possibly use this issue to escalate privileges.
(CVE-2020-14363)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libx11 | 2:1.6.3-1ubuntu2.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | libx11 | 2:1.6.4-3ubuntu0.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | libx11 | 2:1.6.9-2ubuntu1.1 |
Vulnerabilities 2
-
High 7.8
An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged att…
-
Medium 6.7
An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in l…