CVE-2020-14345

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Out-Of-Bounds access in XkbSetNames function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

• CWE-119
• CWE-119

• http://www.openwall.com/lists/oss-security/2021/01/15/1Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1862241Issue Tracking, Third Party Advisory
• https://lists.x.org/archives/xorg-announce/2020-August/003058.htmlVendor Advisory
• https://security.gentoo.org/glsa/202012-01Third Party Advisory
• https://usn.ubuntu.com/4488-2/Third Party Advisory
• https://usn.ubuntu.com/4490-1/Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-1416/Third Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2021/01/15/1Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1862241Issue Tracking, Third Party Advisory
• https://lists.x.org/archives/xorg-announce/2020-August/003058.htmlVendor Advisory
• https://security.gentoo.org/glsa/202012-01Third Party Advisory
• https://usn.ubuntu.com/4488-2/Third Party Advisory
• https://usn.ubuntu.com/4490-1/Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-1416/Third Party Advisory, VDB Entry

Published

Sep 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1434An elevation of privilege vulnerability exists in the way th…5.3
• CVE-2020-14340A vulnerability was discovered in XNIO where file descriptor…5.9
• CVE-2020-14341The "Test Connection" available in v7.x of the Red Hat Singl…2.7
• CVE-2020-14342It was found that cifs-utils' mount.cifs was invoking a shel…7
• CVE-2020-14343A vulnerability was discovered in the PyYAML library in vers…9.8
• CVE-2020-14344An integer overflow leading to a heap-buffer overflow was fo…6.7
• CVE-2020-14346A flaw was found in xorg-x11-server before 1.20.9. An intege…7.8
• CVE-2020-14347A flaw was found in the way xserver memory was not properly …5.5
• CVE-2020-14348It was found in AMQ Online before 1.5.2 that injecting an in…4.3
• CVE-2020-14349It was found that PostgreSQL versions before 12.4, before 11…7.1
• CVE-2020-1435A remote code execution vulnerability exists in the way that…8.8
• CVE-2020-14350It was found that some PostgreSQL extensions did not use sea…7.3