7.2
CVSSv2

CVE-2021-3472

Published: 26/04/2021 Updated: 07/11/2023
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

A flaw was found in xorg-x11-server in versions prior to 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

x.org x server

fedoraproject fedora 32

fedoraproject fedora 33

fedoraproject fedora 34

debian debian linux 9.0

debian debian linux 10.0

redhat enterprise linux 7.0

redhat enterprise linux 8.0

Vendor Advisories

Jan-Niklas Sohn discovered that missing input sanitising in the XInput extension of the Xorg X server may result in privilege escalation if the X server is running privileged For the stable distribution (buster), this problem has been fixed in version 2:1204-1+deb10u3 We recommend that you upgrade your xorg-server packages For the detailed se ...
A flaw was found in xorg-x11-server An interger underflow can occur in xserver which can lead to a local privilege escalation The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability (CVE-2021-3472) ...
A flaw was found in xorg-x11-server An interger underflow can occur in xserver which can lead to a local privilege escalation The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability (CVE-2021-3472) ...
A flaw was found in xorg-x11-server An interger underflow can occur in xserver which can lead to a local privilege escalation The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability ...
A security issue has been found in xorg-server before version 12011 and xorg-xwayland before version 2111 Insufficient checks on the lengths of the XInput extension ChangeFeedbackControl request can lead to out of bounds memory accesses in the X server These issues can lead to privilege escalation for authorized clients on systems where the X ...

Mailing Lists

<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> XOrg server security advisory: April 13, 2021 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Matthieu Herrb &lt ...