CVE-2021-3472
Fixed in a distro release EPSS 1%
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Products: x.org x_server, fedoraproject fedora, debian_linux, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | xorg-server | 1.20.5-r3 |
| Alpine 3.11 | xorg-server | 1.20.6-r3 |
| Alpine 3.12 | xorg-server | 1.20.10-r1 |
| Amazon Linux 2 | xorg-x11-server-Xdmx | 1.20.4-15.amzn2.0.2 |
| Amazon Linux 2 | xorg-x11-server-Xephyr | 1.20.4-15.amzn2.0.2 |
| Amazon Linux 2 | xorg-x11-server-Xnest | 1.20.4-15.amzn2.0.2 |
| Amazon Linux 2 | xorg-x11-server-Xorg | 1.20.4-15.amzn2.0.2 |
| Amazon Linux 2 | xorg-x11-server-Xvfb | 1.20.4-15.amzn2.0.2 |
| Amazon Linux 2 | xorg-x11-server-Xwayland | 1.20.4-15.amzn2.0.2 |
| Amazon Linux 2 | xorg-x11-server-common | 1.20.4-15.amzn2.0.2 |
| Amazon Linux 2 | xorg-x11-server-devel | 1.20.4-15.amzn2.0.2 |
| Amazon Linux 2 | xorg-x11-server-source | 1.20.4-15.amzn2.0.2 |
| Arch Linux | xorg-server | 1.20.11-1 |
| Arch Linux | xorg-xwayland | 21.1.1-1 |
| Debian 10 | xorg-server | 2:1.20.4-1+deb10u3 |
| Debian 12 | xorg-server | 2:1.20.11-1 |
| Debian 13 | xorg-server | 2:1.20.11-1 |
| Debian 14 | xorg-server | 2:1.20.11-1 |
| Debian 9 | xorg-server | 2:1.19.2-1+deb9u8 |
| Red Hat Enterprise Linux 7 | xorg-x11-server | 0:1.20.4-16.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xdmx | 0:1.20.4-16.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xephyr | 0:1.20.4-16.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xnest | 0:1.20.4-16.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xorg | 0:1.20.4-16.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xvfb | 0:1.20.4-16.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-Xwayland | 0:1.20.4-16.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-common | 0:1.20.4-16.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-debuginfo | 0:1.20.4-16.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-devel | 0:1.20.4-16.el7_9 |
| Red Hat Enterprise Linux 7 | xorg-x11-server-source | 0:1.20.4-16.el7_9 |
| SUSE Enterprise Storage 6 | xorg-x11-server | 1.20.3-14.5.16.1 |
| SUSE HPE Helion OpenStack 8 | xorg-x11-server | 7.6_1.18.3-76.40.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | xorg-x11-server | 1.20.3-14.5.16.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | xorg-x11-server | 1.20.3-14.5.16.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | xorg-x11-server | 1.19.6-8.30.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | xorg-x11-server | 1.19.6-8.30.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | xorg-x11-server | 1.20.3-22.5.25.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | xorg-x11-server | 1.20.3-22.5.25.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | xorg-x11-server | 7.4-27.122.40.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | xorg-x11-server | 7.4-27.122.40.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | xorg-x11-server | 7.6_1.18.3-76.40.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | xorg-x11-server | 7.6_1.18.3-76.40.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | xorg-x11-server | 7.6_1.18.3-76.40.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | xorg-x11-server | 1.19.6-4.22.1 |
| SUSE Linux Enterprise Server 12 SP5 | xorg-x11-server | 1.19.6-10.23.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | xorg-x11-server | 1.20.3-14.5.16.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | xorg-x11-server | 1.20.3-14.5.16.1 |
| SUSE Linux Enterprise Server 15-LTSS | xorg-x11-server | 1.19.6-8.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | xorg-x11-server | 7.6_1.18.3-76.40.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | xorg-x11-server | 1.19.6-4.22.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | xorg-x11-server | 1.19.6-10.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | xorg-x11-server | 1.19.6-8.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | xorg-x11-server | 1.20.3-14.5.16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | xorg-x11-server | 1.19.6-10.23.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP2 | xorg-x11-server | 1.20.3-22.5.25.1 |
| SUSE Manager Proxy 4.0 | xorg-x11-server | 1.20.3-14.5.16.1 |
| SUSE Manager Retail Branch Server 4.0 | xorg-x11-server | 1.20.3-14.5.16.1 |
| SUSE Manager Server 4.0 | xorg-x11-server | 1.20.3-14.5.16.1 |
| SUSE OpenStack Cloud 8 | xorg-x11-server | 7.6_1.18.3-76.40.1 |
| SUSE OpenStack Cloud 9 | xorg-x11-server | 1.19.6-4.22.1 |
| SUSE OpenStack Cloud Crowbar 8 | xorg-x11-server | 7.6_1.18.3-76.40.1 |
| SUSE OpenStack Cloud Crowbar 9 | xorg-x11-server | 1.19.6-4.22.1 |
| Ubuntu 16.04 LTS | xorg-server | 2:1.18.4-0ubuntu0.12 |
| Ubuntu 16.04 LTS | xorg-server-hwe-16.04 | 2:1.19.6-1ubuntu4.1~16.04.6 |
| Ubuntu 18.04 LTS | xorg-server | 2:1.19.6-1ubuntu4.9 |
| Ubuntu 18.04 LTS | xorg-server-hwe-18.04 | 2:1.20.8-2ubuntu2.2~18.04.5 |
| Ubuntu 20.04 LTS | xorg-server | 2:1.20.9-2ubuntu1.2~20.04.2 |
| Ubuntu Pro 14.04 LTS | xorg-server | 2:1.15.1-0ubuntu2.11+esm4 |
| openSUSE Leap 15.2 | xorg-x11-server | 1.20.3-lp152.8.21.1 |
| openSUSE Tumbleweed | xorg-x11-server | 1.20.13-1.2 |
| openSUSE Tumbleweed | xwayland | 21.1.2-2.1 |