CVE-2020-14361

A flaw was found in X.Org Server before xorg-x11-server 1.20.9. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

• CWE-191
• CWE-191

• https://bugzilla.redhat.com/show_bug.cgi?id=1869142Issue Tracking, Third Party Advisory
• https://lists.x.org/archives/xorg-announce/2020-August/003058.htmlMailing List, Patch, Vendor Advisory
• https://security.gentoo.org/glsa/202012-01Third Party Advisory
• https://usn.ubuntu.com/4488-2/Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-1418/Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1869142Issue Tracking, Third Party Advisory
• https://lists.x.org/archives/xorg-announce/2020-August/003058.htmlMailing List, Patch, Vendor Advisory
• https://security.gentoo.org/glsa/202012-01Third Party Advisory
• https://usn.ubuntu.com/4488-2/Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-1418/Third Party Advisory, VDB Entry

Published

Sep 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-14356A flaw null pointer dereference in the Linux kernel cgroupv2…7.8
• CVE-2020-14357Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-14358Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-14359A vulnerability was found in all versions of Keycloak Gateke…7.3
• CVE-2020-1436A remote code execution vulnerability exists when the Window…8.8
• CVE-2020-14360A flaw was found in the X.Org Server before version 1.20.10.…7.8
• CVE-2020-14362A flaw was found in X.Org Server before xorg-x11-server 1.20…7.8
• CVE-2020-14363An integer overflow vulnerability leading to a double-free w…7.8
• CVE-2020-14364An out-of-bounds read/write access flaw was found in the USB…5
• CVE-2020-14365A flaw was found in the Ansible Engine, in ansible-engine 2.…7.1
• CVE-2020-14366A vulnerability was found in keycloak, where path traversal …7.5
• CVE-2020-14367A flaw was found in chrony versions before 3.5.1 when creati…6