X.Org security advisory: July 31, 2020: Xserver
matthieu at herrb.eu
Fri Jul 31 13:44:44 UTC 2020
X.Org security advisory: July 31, 2020
X Server Pixel Data Uninitialized Memory Information Disclosure
Allocation for pixmap data in AllocatePixmap() does not initialize the
memory in xserver, it leads to leak uninitialize heap memory to
clients. When the X server runs with elevated privileges.
This flaw can lead to ASLR bypass, which when combined with other
flaws (known/unknown) could lead to lead to privilege elevation in the
A patch for this issue has been commited to the xorg server git
repository. xorg-server 1.20.9 will be released shortly and will
include this patch.
diff --git a/dix/pixmap.c b/dix/pixmap.c
index 1186d7dbb..5a0146bbb 100644
@@ -116,7 +116,7 @@ AllocatePixmap(ScreenPtr pScreen, int pixDataSize)
if (pScreen->totalPixmapSize > ((size_t) - 1) - pixDataSize)
- pPixmap = malloc(pScreen->totalPixmapSize + pixDataSize);
+ pPixmap = calloc(1, pScreen->totalPixmapSize + pixDataSize);
This vulnerability was discovered by Jan-Niklas Sohn working with
Trend Micro Zero Day Initiative.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 793 bytes
Desc: not available
More information about the xorg-announce