CVE-2020-14346

2020-09-1500:00:00

CWE-191

redhat

www.cve.org

x server

integer underflow

data confidentiality

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

30.8%

JSON

A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "xorg-x11-server",
    "versions": [
      {
        "version": "before xorg-x11-server 1.20.9",
        "status": "affected"
      }
    ]
  }
]