CVE-2020-14344

An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.

An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.

An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Mesa provides a 3D graphics API that is compatible with Open Graphics Library (OpenGL). It also provides hardware-accelerated drivers for many popular graphics chips.

The following packages have been upgraded to a later upstream version: egl-wayland (1.1.5), libdrm (2.4.103), libglvnd (1.3.2), libinput (1.16.3), libwacom (1.6), mesa (20.3.3), xorg-x11-server (1.20.10). (BZ#1878160, BZ#1886648, BZ#1887654, BZ#1887655)

Security Fix(es):

• xorg-x11-server: Out-of-bounds access in XkbSetNames function (CVE-2020-14345)

• xorg-x11-server: Integer underflow in the X input extension protocol (CVE-2020-14346)

• xorg-x11-server: Out-of-bounds access in XkbSetMap function (CVE-2020-14360)

• xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability (CVE-2020-14361)

• xorg-x11-server: XRecordRegisterClients integer underflow privilege escalation vulnerability (CVE-2020-14362)

• libX11: Integer overflow leads to double free in locale handling (CVE-2020-14363)

• xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow privilege escalation vulnerability (CVE-2020-25712)

• libX11: Heap overflow in the X input method client (CVE-2020-14344)

• xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of dix/pixmap.c (CVE-2020-14347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.

An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux.

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Mesa provides a 3D graphics API that is compatible with Open Graphics Library (OpenGL). It also provides hardware-accelerated drivers for many popular graphics chips.

The following packages have been upgraded to a later upstream version: egl-wayland (1.1.5), libdrm (2.4.103), libglvnd (1.3.2), libinput (1.16.3), libwacom (1.6), mesa (20.3.3), xorg-x11-server (1.20.10). (BZ#1878160, BZ#1886648, BZ#1887654, BZ#1887655)

Security Fix(es):

• xorg-x11-server: Out-of-bounds access in XkbSetNames function (CVE-2020-14345)

• xorg-x11-server: Integer underflow in the X input extension protocol (CVE-2020-14346)

• xorg-x11-server: Out-of-bounds access in XkbSetMap function (CVE-2020-14360)

• xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability (CVE-2020-14361)

• xorg-x11-server: XRecordRegisterClients integer underflow privilege escalation vulnerability (CVE-2020-14362)

• libX11: Integer overflow leads to double free in locale handling (CVE-2020-14363)

• xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow privilege escalation vulnerability (CVE-2020-25712)

• libX11: Heap overflow in the X input method client (CVE-2020-14344)

• xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of dix/pixmap.c (CVE-2020-14347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

The X Input Method (XIM) client implementation in libX11 has some integer overflows and signed/unsigned comparison issues that can lead to heap corruption when handling malformed messages from an input method (CVE-2020-14344).

The libx11 package has been updated to version 1.6.10 which fixes this issue.

The x11-proto-devel package has been updated to remove the "/usr/include/X11/extensions/XKBgeom.h" header file which has been moved to the libx11-devel package.

This update for libX11 fixes the following issues:

• Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628)

This update was imported from the SUSE:SLE-15:Update update project.

This update for libX11 fixes the following issues:

• Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628)

This update was imported from the SUSE:SLE-15:Update update project.

This update for libX11 fixes the following issues:

• Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628).

This update was imported from the SUSE:SLE-15:Update update project.

This update for libX11 fixes the following issues:

• Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628).

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the libX11-6-1.7.2-1.2 package on the GA media of openSUSE Tumbleweed.

This update for xorg-x11-libX11 fixes the following issues:

• Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628)

This update for xorg-x11-libX11 fixes the following issues:

• Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628).

This update for libX11 fixes the following issues:

• Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628)

This update for libX11 fixes the following issues:

• Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628)

This update for libX11 fixes the following issues:

• Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628).

This update for libX11 fixes the following issues:

• Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628).

Todd Carson discovered that libx11 incorrectly handled certain memory operations. A local attacker could possibly use this issue to escalate privileges. (CVE-2020-14344)

Jayden Rivers discovered that libx11 incorrectly handled locales. A local attacker could possibly use this issue to escalate privileges. (CVE-2020-14363)

USN-4487-1 fixed several vulnerabilities in libx11. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM.

Original advisory details:

Todd Carson discovered that libx11 incorrectly handled certain memory operations. A local attacker could possibly use this issue to escalate privileges. (CVE-2020-14344)

Jayden Rivers discovered that libx11 incorrectly handled locales. A local attacker could possibly use this issue to escalate privileges. (CVE-2020-14363)