CVE-2020-14363: 
NixOS vulnerability analysis and mitigation

CVE-2020-14363 is an integer overflow vulnerability leading to a double-free condition discovered in libX11. The vulnerability was disclosed in August 2020 and affects the core X11 protocol client library's locale handling functionality. The vulnerability affects libX11 versions prior to 1.6.12 (Xorg Announce, NVD).

The vulnerability consists of two related issues: an integer overflow followed by a double-free condition. The integer overflow occurs in a for loop where the length variable can be incremented to a negative value with sufficiently large font set names. This causes a subsequent malloc() call to fail, leading to a double-free condition where the same memory region is freed twice - once as required_list and again as om->core.required_charset.charset_list. The vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (Red Hat Bugzilla, GitHub Exploit).

The vulnerability allows a local privileged attacker to cause applications compiled with libX11 to crash or potentially execute arbitrary code. The highest threats from this flaw are to system confidentiality, integrity, and availability (NVD).

A proof-of-concept exploit exists that demonstrates the vulnerability by generating enough fontsets with large names to trigger the integer overflow condition. The exploit requires local access and has been tested on Ubuntu 20.04 with Glibc 2.31 (GitHub Exploit).

The vulnerability was fixed in libX11 version 1.6.12. Major Linux distributions have released security updates to address this vulnerability. Users should update their systems to the patched versions available through their distribution's package management system (Xorg Announce, Fedora Update).