CVE-2020-14344

MEDIUM Year: 2020
CVSS v3 Score
6.7
Medium
CVSS v2 Score
4.6
Medium
Weakness Type
CWE-190
View all →

Vulnerability Description

An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.

Related Vulnerabilities

CVE-2019-14611

MEDIUM
CVSS:6.7(Medium)

Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.

CWE-1902019

CVE-2020-0309

MEDIUM
CVSS:6.7(Medium)

In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System privileges and a Firmware compromise needed. U...

CWE-1902020

CVE-2020-10722

MEDIUM
CVSS:6.7(Medium)

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing ...

CWE-1902020

CVE-2020-10723

MEDIUM
CVSS:6.7(Medium)

A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied ...

CWE-1902020

CVE-2020-11160

MEDIUM
CVSS:6.7(Medium)

Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr...

CWE-1902020

CVE-2020-14309

MEDIUM
CVSS:6.7(Medium)

There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic ove...

CWE-1902020