Detections
Analytics
Alpine: multiple libx11 packages: security update to 1.6.9-r0 (deprecated)
medium Tenable Cloud Security Plugin ID 400352
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was
implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid
programs call XIM client functions while running with elevated privileges. No such programs are shipped
with Red Hat Enterprise Linux. (CVE-2020-14344)
See Also
https://git.alpinelinux.org/aports/commit/?id=52801efd40639cc858d9d72f583636126d635e87
https://git.alpinelinux.org/aports/commit/?id=ed32bc3bc0848f7aa57c0f0533d62ba6ef086ceb
Plugin Details
Severity: Medium
ID: 400352
Version: Revision 1.28
Type: Local
Published: 8/16/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.27
CVSS v2
Risk Factor: Medium
Base Score: 4.6
Temporal Score: 3.4
Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2020-14344
CVSS v3
Risk Factor: Medium
Base Score: 6.7
Temporal Score: 5.8
Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 7/31/2020
Vulnerability Publication Date: 8/5/2020
Reference Information
CVE: CVE-2020-14344