VDB
ALPINE-CVE-2020-14346
ALPINE-CVE-2020-14346
PUBLISHED
CVSS 7.800000190734863 HIGH
A flaw was found in xorg-x11-server before 1.20.9. An integer underflow in the X input extension protocol decoding in the X server may lead to arbitrary access of memory contents. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.10 | xorg-server | 0, 1.10.0-r0, 1.10.0.901-r0 |
| Alpine:v3.12 | xorg-server | 1.16.2-r0, 1.20.6-r0, 1.18.4-r1 |
| Alpine:v3.9 | xorg-server | 0, 1.10.0-r0, 1.10.0.901-r0 |
| Alpine:v3.11 | xorg-server | 1.18.4-r4, 1.19.3-r0, 1.19.3-r1 |
Timeline
- Sep 15, 2020 CVE Published
- Aug 5, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch