CVE-2021-3472
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in...
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
- Record
CVE-2021-3472- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-191
- Updated
- 2026-11-02
CVE List No score
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
- Record
CVE-2021-3472- Weakness
- CWE-191
- Updated
- 2026-11-02
EUVDEUVD-2021-26794 No score
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
- Record
EUVD-2021-26794- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cmmq-26gr-w7rc No score
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in...
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
- Record
GHSA-cmmq-26gr-w7rc- Weakness
- CWE-191
- Updated
- 2026-11-02
OSVALPINE-CVE-2021-3472
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
- Record
ALPINE-CVE-2021-3472- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVAZL-44133
CVE-2021-3472 affecting package xorg-x11-server 1.20.10-6
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
- Record
AZL-44133- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-05
Show 19 moreShow less
OSVBELL-CVE-2021-3472
CVE-2021-3472 does not affect BellSoft software
- Record
BELL-CVE-2021-3472- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
- Record
CVE-2021-3472- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-3472
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
- Record
DEBIAN-CVE-2021-3472- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2021-1217
xorg-x11-server security update
X.Org X11 X server
Security Fix(es):
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3472)
- Record
OESA-2021-1217- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2033
Red Hat Security Advisory: xorg-x11-server security update
- Record
RHSA-2021:2033- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-3472
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
- Record
UBUNTU-CVE-2021-3472- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2021-0190 No score
Updated x11-server packages fix security vulnerability
Insufficient checks on the lengths of the XInput extension ChangeFeedbackControl request can lead to out of bounds memory accesses in the X server.
These issues can lead to privilege escalation for authorized clients on systems where the X server is running privileged (CVE-2021-3472).
- Record
MGASA-2021-0190- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0554-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
This update was imported from the SUSE:SLE-15-SP2:Update update project.
- Record
openSUSE-SU-2021:0554-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11525-1 No score
xorg-x11-server-1.20.13-1.2 on GA media
These are all security issues fixed in the xorg-x11-server-1.20.13-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11525-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11528-1 No score
xwayland-21.1.2-2.1 on GA media
These are all security issues fixed in the xwayland-21.1.2-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11528-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1179-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
- Record
SUSE-SU-2021:1179-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1180-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
- Record
SUSE-SU-2021:1180-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1181-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
- Record
SUSE-SU-2021:1181-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1182-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
- Record
SUSE-SU-2021:1182-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1187-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
- Record
SUSE-SU-2021:1187-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1188-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
- Record
SUSE-SU-2021:1188-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:14690-1 No score
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues:
- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
- Record
SUSE-SU-2021:14690-1- Updated
- 2026-11-02
OSVUSN-4905-1 No score
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerability
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain lengths of XInput extension ChangeFeedbackControl requests. An attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-4905-1- Updated
- 2026-11-02
OSVUSN-4905-2 No score
xorg-server vulnerability
USN-4905-1 fixed a vulnerability in X.Org. This update provides the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain lengths of XInput extension ChangeFeedbackControl requests. An attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-4905-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xorg-serverAlpine:v3.10 |
before 1.20.5-r3 | 1.20.5-r3 |
xorg-serverAlpine:v3.11 |
before 1.20.6-r3 | 1.20.6-r3 |
xorg-serverAlpine:v3.12 |
before 1.20.10-r1 | 1.20.10-r1 |
xorg-serverAlpine:v3.13 |
before 1.20.10-r1 | 1.20.10-r1 |
xorg-serverAlpine:v3.14 |
before 1.20.10-r5 | 1.20.10-r5 |
xorg-serverAlpine:v3.15 |
before 1.20.10-r5 | 1.20.10-r5 |
xorg-serverAlpine:v3.16 |
before 1.20.10-r5 | 1.20.10-r5 |
xorg-serverAlpine:v3.17 |
before 1.20.10-r5 | 1.20.10-r5 |
xorg-serverAlpine:v3.18 |
before 1.20.10-r5 | 1.20.10-r5 |
xorg-serverAlpine:v3.19 |
before 1.20.10-r5 | 1.20.10-r5 |
Show 110 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xorg-serverAlpine:v3.20 |
before 1.20.10-r5 | 1.20.10-r5 |
xorg-serverAlpine:v3.21 |
before 1.20.10-r5 | 1.20.10-r5 |
xorg-serverAlpine:v3.22 |
before 1.20.10-r5 | 1.20.10-r5 |
xorg-serverAlpine:v3.23 |
before 1.20.10-r5 | 1.20.10-r5 |
xorg-serverAlpine:v3.24 |
before 1.20.10-r5 | 1.20.10-r5 |
xwaylandAlpine:v3.14 |
before 21.1.0-r4 | 21.1.0-r4 |
xwaylandAlpine:v3.15 |
before 21.1.0-r4 | 21.1.0-r4 |
xwaylandAlpine:v3.16 |
before 21.1.0-r4 | 21.1.0-r4 |
xwaylandAlpine:v3.17 |
before 21.1.0-r4 | 21.1.0-r4 |
xwaylandAlpine:v3.18 |
before 21.1.0-r4 | 21.1.0-r4 |
xwaylandAlpine:v3.19 |
before 21.1.0-r4 | 21.1.0-r4 |
xwaylandAlpine:v3.20 |
before 21.1.0-r4 | 21.1.0-r4 |
xwaylandAlpine:v3.21 |
before 21.1.0-r4 | 21.1.0-r4 |
xwaylandAlpine:v3.22 |
before 21.1.0-r4 | 21.1.0-r4 |
xwaylandAlpine:v3.23 |
before 21.1.0-r4 | 21.1.0-r4 |
xwaylandAlpine:v3.24 |
before 21.1.0-r4 | 21.1.0-r4 |
xorg-x11-serverAzure Linux:3 |
through 1.20.10-6 | None known |
xorg-serverDebian:12 |
before 2:1.20.11-1 | 2:1.20.11-1 |
xorg-serverDebian:13 |
before 2:1.20.11-1 | 2:1.20.11-1 |
xorg-serverDebian:14 |
before 2:1.20.11-1 | 2:1.20.11-1 |
xorg-serverDebian:9 |
before 2:1.19.2-1+deb9u8, plus listed versions 2:1.19.2-12:1.19.2-1+deb9u12:1.19.2-1+deb9u22:1.19.2-1+deb9u32:1.19.2-1+deb9u42:1.19.2-1+deb9u52:1.19.2-1+deb9u62:1.19.2-1+deb9u7 |
2:1.19.2-1+deb9u8 |
xorg-serverDebian:10 |
before 2:1.20.4-1+deb10u3, plus listed versions 2:1.20.4-12:1.20.4-1+deb10u12:1.20.4-1+deb10u2 |
2:1.20.4-1+deb10u3 |
x11-serverMageia:7 |
before 1.20.11-1.mga7 | 1.20.11-1.mga7 |
x11-serverMageia:8 |
before 1.20.11-1.mga8 | 1.20.11-1.mga8 |
xorg-x11-serveropenEuler:20.03-LTS-SP1 |
before 1.20.8-7.oe1 | 1.20.8-7.oe1 |
xorg-x11-serverRed Hat:enterprise_linux:7::client |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XephyrRed Hat:enterprise_linux:7::client |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XorgRed Hat:enterprise_linux:7::client |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-commonRed Hat:enterprise_linux:7::client |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XdmxRed Hat:enterprise_linux:7::client |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XnestRed Hat:enterprise_linux:7::client |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XvfbRed Hat:enterprise_linux:7::client |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XwaylandRed Hat:enterprise_linux:7::client |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-develRed Hat:enterprise_linux:7::client |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-sourceRed Hat:enterprise_linux:7::client |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-serverRed Hat:enterprise_linux:7::computenode |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XdmxRed Hat:enterprise_linux:7::computenode |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XephyrRed Hat:enterprise_linux:7::computenode |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XnestRed Hat:enterprise_linux:7::computenode |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XorgRed Hat:enterprise_linux:7::computenode |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XvfbRed Hat:enterprise_linux:7::computenode |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XwaylandRed Hat:enterprise_linux:7::computenode |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-commonRed Hat:enterprise_linux:7::computenode |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-develRed Hat:enterprise_linux:7::computenode |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-sourceRed Hat:enterprise_linux:7::computenode |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-serverRed Hat:enterprise_linux:7::server |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XephyrRed Hat:enterprise_linux:7::server |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XorgRed Hat:enterprise_linux:7::server |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-commonRed Hat:enterprise_linux:7::server |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XdmxRed Hat:enterprise_linux:7::server |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XnestRed Hat:enterprise_linux:7::server |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XvfbRed Hat:enterprise_linux:7::server |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XwaylandRed Hat:enterprise_linux:7::server |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-develRed Hat:enterprise_linux:7::server |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-sourceRed Hat:enterprise_linux:7::server |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-serverRed Hat:enterprise_linux:7::workstation |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XephyrRed Hat:enterprise_linux:7::workstation |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XorgRed Hat:enterprise_linux:7::workstation |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-commonRed Hat:enterprise_linux:7::workstation |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XdmxRed Hat:enterprise_linux:7::workstation |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XnestRed Hat:enterprise_linux:7::workstation |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XvfbRed Hat:enterprise_linux:7::workstation |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-XwaylandRed Hat:enterprise_linux:7::workstation |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-develRed Hat:enterprise_linux:7::workstation |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-server-sourceRed Hat:enterprise_linux:7::workstation |
before 0:1.20.4-16.el7_9 | 0:1.20.4-16.el7_9 |
xorg-x11-serverSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 1.19.6-8.30.1 | 1.19.6-8.30.1 |
xorg-x11-serverSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 1.19.6-8.30.1 | 1.19.6-8.30.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 15-LTSS |
before 1.19.6-8.30.1 | 1.19.6-8.30.1 |
xorg-x11-serverSUSE:Linux Enterprise Server for SAP Applications 15 |
before 1.19.6-8.30.1 | 1.19.6-8.30.1 |
xorg-x11-serverSUSE:OpenStack Cloud 9 |
before 1.19.6-4.22.1 | 1.19.6-4.22.1 |
xorg-x11-serverSUSE:OpenStack Cloud Crowbar 9 |
before 1.19.6-4.22.1 | 1.19.6-4.22.1 |
xorg-x11-serverSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 1.19.6-4.22.1 | 1.19.6-4.22.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 1.19.6-4.22.1 | 1.19.6-4.22.1 |
xorg-x11-serverSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.19.6-10.23.1 | 1.19.6-10.23.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 12 SP5 |
before 1.19.6-10.23.1 | 1.19.6-10.23.1 |
xorg-x11-serverSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.19.6-10.23.1 | 1.19.6-10.23.1 |
xorg-x11-serverSUSE:Linux Enterprise Module for Basesystem 15 SP2 |
before 1.20.3-22.5.25.1 | 1.20.3-22.5.25.1 |
xorg-x11-serverSUSE:Linux Enterprise Module for Development Tools 15 SP2 |
before 1.20.3-22.5.25.1 | 1.20.3-22.5.25.1 |
xorg-x11-serverSUSE:Linux Enterprise Workstation Extension 15 SP2 |
before 1.20.3-22.5.25.1 | 1.20.3-22.5.25.1 |
xorg-x11-serverSUSE:HPE Helion OpenStack 8 |
before 7.6_1.18.3-76.40.1 | 7.6_1.18.3-76.40.1 |
xorg-x11-serverSUSE:OpenStack Cloud 8 |
before 7.6_1.18.3-76.40.1 | 7.6_1.18.3-76.40.1 |
xorg-x11-serverSUSE:OpenStack Cloud Crowbar 8 |
before 7.6_1.18.3-76.40.1 | 7.6_1.18.3-76.40.1 |
xorg-x11-serverSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 7.6_1.18.3-76.40.1 | 7.6_1.18.3-76.40.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 12 SP2-BCL |
before 7.6_1.18.3-76.40.1 | 7.6_1.18.3-76.40.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 7.6_1.18.3-76.40.1 | 7.6_1.18.3-76.40.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 12 SP3-BCL |
before 7.6_1.18.3-76.40.1 | 7.6_1.18.3-76.40.1 |
xorg-x11-serverSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 1.20.3-14.5.16.1 | 1.20.3-14.5.16.1 |
xorg-x11-serverSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 1.20.3-14.5.16.1 | 1.20.3-14.5.16.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 15 SP1-BCL |
before 1.20.3-14.5.16.1 | 1.20.3-14.5.16.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 1.20.3-14.5.16.1 | 1.20.3-14.5.16.1 |
xorg-x11-serverSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 1.20.3-14.5.16.1 | 1.20.3-14.5.16.1 |
xorg-x11-serverSUSE:Manager Proxy 4.0 |
before 1.20.3-14.5.16.1 | 1.20.3-14.5.16.1 |
xorg-x11-serverSUSE:Manager Retail Branch Server 4.0 |
before 1.20.3-14.5.16.1 | 1.20.3-14.5.16.1 |
xorg-x11-serverSUSE:Manager Server 4.0 |
before 1.20.3-14.5.16.1 | 1.20.3-14.5.16.1 |
xorg-x11-serverSUSE:Enterprise Storage 6 |
before 1.20.3-14.5.16.1 | 1.20.3-14.5.16.1 |
xorg-x11-serverSUSE:Linux Enterprise Point of Sale 11 SP3 |
before 7.4-27.122.40.1 | 7.4-27.122.40.1 |
xorg-x11-serverSUSE:Linux Enterprise Server 11 SP4-LTSS |
before 7.4-27.122.40.1 | 7.4-27.122.40.1 |
xorg-serverUbuntu:Pro:14.04:LTS |
before 2:1.15.1-0ubuntu2.11+esm4, plus listed versions 2:1.14.3-3ubuntu22:1.14.3-3ubuntu32:1.14.3-3ubuntu42:1.14.3-5ubuntu12:1.14.4-1ubuntu1 Show 22 moreShow less2:1.14.4-1ubuntu22:1.14.4.901-0ubuntu22:1.14.5-1ubuntu22:1.14.5-1ubuntu42:1.15.0-1ubuntu12:1.15.0-1ubuntu22:1.15.0-1ubuntu32:1.15.0-1ubuntu42:1.15.0-1ubuntu62:1.15.0-1ubuntu72:1.15.1-0ubuntu12:1.15.1-0ubuntu22:1.15.1-0ubuntu2.12:1.15.1-0ubuntu2.42:1.15.1-0ubuntu2.52:1.15.1-0ubuntu2.62:1.15.1-0ubuntu2.72:1.15.1-0ubuntu2.92:1.15.1-0ubuntu2.102:1.15.1-0ubuntu2.112:1.15.1-0ubuntu2.11+esm22:1.15.1-0ubuntu2.11+esm3 |
2:1.15.1-0ubuntu2.11+esm4 |
xorg-serverUbuntu:16.04:LTS |
before 2:1.18.4-0ubuntu0.12, plus listed versions 2:1.17.2-1ubuntu92:1.17.2-1ubuntu102:1.17.3-2ubuntu12:1.17.3-2ubuntu22:1.17.3-2ubuntu3 Show 17 moreShow less2:1.17.3-2ubuntu42:1.18.1-1ubuntu32:1.18.1-1ubuntu42:1.18.3-1ubuntu12:1.18.3-1ubuntu22:1.18.3-1ubuntu2.22:1.18.3-1ubuntu2.32:1.18.4-0ubuntu0.12:1.18.4-0ubuntu0.22:1.18.4-0ubuntu0.32:1.18.4-0ubuntu0.42:1.18.4-0ubuntu0.62:1.18.4-0ubuntu0.72:1.18.4-0ubuntu0.82:1.18.4-0ubuntu0.92:1.18.4-0ubuntu0.102:1.18.4-0ubuntu0.11 |
2:1.18.4-0ubuntu0.12 |
xorg-server-hwe-16.04Ubuntu:16.04:LTS |
before 2:1.19.6-1ubuntu4.1~16.04.6, plus listed versions 2:1.18.4-1ubuntu6.1~16.04.12:1.18.4-1ubuntu6.1~16.04.22:1.19.3-1ubuntu1~16.04.22:1.19.3-1ubuntu1~16.04.32:1.19.3-1ubuntu1~16.04.4 Show 7 moreShow less2:1.19.5-0ubuntu2~16.04.12:1.19.6-1ubuntu4~16.04.12:1.19.6-1ubuntu4.1~16.04.12:1.19.6-1ubuntu4.1~16.04.22:1.19.6-1ubuntu4.1~16.04.32:1.19.6-1ubuntu4.1~16.04.42:1.19.6-1ubuntu4.1~16.04.5 |
2:1.19.6-1ubuntu4.1~16.04.6 |
xorg-serverUbuntu:18.04:LTS |
before 2:1.19.6-1ubuntu4.9, plus listed versions 2:1.19.5-0ubuntu22:1.19.6-1ubuntu12:1.19.6-1ubuntu22:1.19.6-1ubuntu32:1.19.6-1ubuntu4 Show 8 moreShow less2:1.19.6-1ubuntu4.12:1.19.6-1ubuntu4.22:1.19.6-1ubuntu4.32:1.19.6-1ubuntu4.42:1.19.6-1ubuntu4.52:1.19.6-1ubuntu4.62:1.19.6-1ubuntu4.72:1.19.6-1ubuntu4.8 |
2:1.19.6-1ubuntu4.9 |
xorg-server-hwe-18.04Ubuntu:18.04:LTS |
before 2:1.20.8-2ubuntu2.2~18.04.5, plus listed versions 2:1.20.1-3ubuntu2.1~18.04.12:1.20.4-1ubuntu3~18.04.12:1.20.5+git20191008-0ubuntu1~18.04.12:1.20.8-2ubuntu2.1~18.04.12:1.20.8-2ubuntu2.2~18.04.12:1.20.8-2ubuntu2.2~18.04.22:1.20.8-2ubuntu2.2~18.04.32:1.20.8-2ubuntu2.2~18.04.4 |
2:1.20.8-2ubuntu2.2~18.04.5 |
xorg-serverUbuntu:20.04:LTS |
before 2:1.20.9-2ubuntu1.2~20.04.2, plus listed versions 2:1.20.5+git20191008-0ubuntu12:1.20.6-1ubuntu12:1.20.7-2ubuntu12:1.20.7-2ubuntu22:1.20.8-2ubuntu2 Show 7 moreShow less2:1.20.8-2ubuntu2.12:1.20.8-2ubuntu2.22:1.20.8-2ubuntu2.32:1.20.8-2ubuntu2.42:1.20.8-2ubuntu2.62:1.20.9-2ubuntu1.1~20.04.12:1.20.9-2ubuntu1.2~20.04.1 |
2:1.20.9-2ubuntu1.2~20.04.2 |
xorg-x11-serveropenSUSE:Leap 15.2 |
before 1.20.3-lp152.8.21.1 | 1.20.3-lp152.8.21.1 |
xorg-x11-serveropenSUSE:Tumbleweed From an advisory covering 28 CVEs |
before 1.20.13-1.2 | 1.20.13-1.2 |
xwaylandopenSUSE:Tumbleweed |
before 21.1.2-2.1 | 21.1.2-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| affected | OSV | |
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-3472 is a high vulnerability (CVSS 7.8) in The Xorg Project Xorg-x11-server, published April 13, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.05%, the 64th percentile. Fixed in xorg-server 1.20.5-r3.
References
openwall.com/lists/oss-security/2021/04/13/1
lists.debian.org/debian-lts-announce/2021/04/msg00013.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6S5OPXUDYBSRSVWVLFLJ6AFERG4HNY
debian.org/security/2021/dsa-4893
Show 67 moreShow less
zerodayinitiative.com/advisories/ZDI-21-463
lists.x.org/archives/xorg-announce/2021-April/003080.html
bugzilla.redhat.com/show_bug.cgi?id=1944167
seclists.org/oss-sec/2021/q2/20
tenable.com/plugins/nessus/148701
gitlab.freedesktop.org/xorg/xserver/-/commit/7aaf54a1884f71dc363f0b884e57bcb67407a6cd
security.gentoo.org/glsa/202104-02
nvd.nist.gov/vuln/detail/CVE-2021-3472
github.com/advisories/GHSA-cmmq-26gr-w7rc
security.alpinelinux.org/vuln/CVE-2021-3472
docs.bell-sw.com/security/cves/CVE-2021-3472
security-tracker.debian.org/tracker/CVE-2021-3472
advisories.mageia.org/MGASA-2021-0190.html
bugs.mageia.org/show_bug.cgi?id=28774
lists.freedesktop.org/archives/xorg/2021-April/060678.html
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1217
access.redhat.com/errata/RHSA-2021:2033
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2033.json
cve.org/CVERecord?id=CVE-2021-3472
suse.com/support/update/announcement/2021/suse-su-20211179-1
bugzilla.suse.com/1180128
ubuntu.com/security/CVE-2021-3472
lists.opensuse.org/archives/list/[email protected]/thread/7CRPRB7NRFEWN4RTARQEO4ANKTCLF6AS