vulnerability

FreeBSD: VID-3C7BA82A-D3FB-11EA-9ABA-0C9D925BBBC0 (CVE-2020-14347): xorg-server -- Pixel Data Uninitialized Memory Information Disclosure

Try Surface Command
Back to search
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
Jul 31, 2020
Added
Aug 2, 2020
Modified
Oct 20, 2020

Description

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.


From VID-3C7BA82A-D3FB-11EA-9ABA-0C9D925BBBC0:




The X.org project reports:



Allocation for pixmap data in AllocatePixmap() does not initialize


the memory in xserver, it leads to leak uninitialize heap memory to


clients. When the X server runs with elevated privileges.


This flaw can lead to ASLR bypass, which when combined with other


flaws (known/unknown) could lead to lead to privilege elevation in


the client.




Solution(s)

freebsd-upgrade-package-xephyrfreebsd-upgrade-package-xorg-dmxfreebsd-upgrade-package-xorg-nestserverfreebsd-upgrade-package-xorg-serverfreebsd-upgrade-package-xorg-vfbserverfreebsd-upgrade-package-xwayland

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today