CVE-2020-14363

An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application c...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to confidentiality, integrity as well as system availability.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Alpine Linux ALPINE-CVE-2020-14363 libx11 修正版: 1.6.12-r0
BellSoft Alpaquita BELL-CVE-2020-14363
Debian DEBIAN-CVE-2020-14363 libx11 修正版: 2:1.6.12-1

参照URL

advisory github.com
advisory lists.x.org
advisory usn.ubuntu.com
report bugzilla.redhat.com
report github.com
web lists.fedoraproject.org