Out-of-Bounds Access Vulnerability in X.Org Server Affects Privilege Escalation
CVE-2020-14360

7.8HIGH

Key Information:

Vendor

X.org

Status
Xorg-x11-server
Vendor
CVE Published:
20 January 2021

What is CVE-2020-14360?

The X.Org Server prior to version 1.20.10 contains a vulnerability that results from an out-of-bounds access in the XkbSetMap function. This flaw may allow attackers to exploit the server, potentially leading to privilege escalation. The impact of this vulnerability could compromise data confidentiality, integrity, and system availability, posing serious risks to systems relying on X.Org Server.

Affected Version(s)

xorg-x11-server xorg-x11-server 1.20.10

References

https://lists.x.org/archives/xorg-announce/2020-December/...
x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=1869139
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.