CVE-2020-14344

MEDIUM6.7EPSS 0.16%

libx11 - security update

Published: 8/5/2020Modified: 4/28/2026

Also known as:ALPINE-CVE-2020-14344DEBIAN-CVE-2020-14344

Description

An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.

Affected packages (3)

Alpine/libx11from 0, < 1.6.10-r0
Debian/libx11from 0, < 2:1.6.10-1
Debian/libx11from 0, < 2:1.6.4-3+deb9u2

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM6.7	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2020-14344
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2020-14344