Commit Graph

1 Commits

Author SHA1 Message Date
Fredrik Rinnestam
3a026cd9c1 [notify] xorg-server: Fix for CVE-2020-14347.
X.Org security advisory: July 31, 2020

X Server Pixel Data Uninitialized Memory Information Disclosure
===============================================================

CVE-2020-14347

Allocation for pixmap data in AllocatePixmap() does not initialize the
memory in xserver, it leads to leak uninitialize heap memory to
clients. When the X server runs with elevated privileges.

This flaw can lead to ASLR bypass, which when combined with other
flaws (known/unknown) could lead to lead to privilege elevation in the
client.
2020-08-01 16:17:09 +02:00