{"id":"CVE-2021-4010","aliases":["ALPINE-CVE-2021-4010","ALSA-2022:1917","BELL-CVE-2021-4010","DEBIAN-CVE-2021-4010","DSA-5027-1","EUVD-2021-33916","GHSA-3qwg-vch4-4r45","MGASA-2021-0573","OESA-2021-1468","OESA-2022-1949","RHSA-2022:0003","RHSA-2022:1917","RLSA-2022:1917","SUSE-SU-2021:4122-1","SUSE-SU-2021:4136-1","SUSE-SU-2021:4136-2","UBUNTU-CVE-2021-4010","USN-5193-1","openSUSE-SU-2021:1606-1","openSUSE-SU-2021:4136-1","openSUSE-SU-2024:11685-1","openSUSE-SU-2024:11699-1"],"status":"published","title":"A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...","description":"A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00614,"percentile":0.49707,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2021-12-14T12:00:00Z","modified":"2026-11-03T06:31:45Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"xorg-server","fixed_in":["21.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"xorg-server","fixed_in":["21.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"xorg-server","fixed_in":["21.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"xorg-server","fixed_in":["21.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"xorg-server","fixed_in":["21.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"xorg-server","fixed_in":["21.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"xorg-server","fixed_in":["21.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"xorg-server","fixed_in":["21.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"xorg-server","fixed_in":["21.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"xorg-server","fixed_in":["21.1.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"xwayland","fixed_in":["21.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"xwayland","fixed_in":["21.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"xwayland","fixed_in":["21.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"xwayland","fixed_in":["21.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"xwayland","fixed_in":["21.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"xwayland","fixed_in":["21.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"xwayland","fixed_in":["21.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"xwayland","fixed_in":["21.1.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"xwayland","fixed_in":["21.1.4-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xorg-server","fixed_in":["2:1.20.13-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xorg-server","fixed_in":["2:1.20.13-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xorg-server","fixed_in":["2:1.20.13-3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xwayland","fixed_in":["2:21.1.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xwayland","fixed_in":["2:21.1.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xwayland","fixed_in":["2:21.1.4-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"xorg-server-hwe-18.04","fixed_in":["2:1.20.8-2ubuntu2.2~18.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"xorg-server","fixed_in":["2:1.20.13-1ubuntu1~20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"xorg-server","fixed_in":["2:1.20.13-1ubuntu2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"xwayland","fixed_in":["2:21.1.3-1ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.3-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-5.el8_6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.13-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.13-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.13-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.1.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.1.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.1.4-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.4-1+deb10u4"}]}],"versions":["2:1.20.4-1","2:1.20.4-1+deb10u1","2:1.20.4-1+deb10u2","2:1.20.4-1+deb10u3"],"bundled":4},{"source":"osv","ecosystem":"Debian:11","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.11-1+deb11u1"}]}],"versions":["2:1.20.11-1"],"bundled":4},{"source":"osv","ecosystem":"Mageia:8","package":"x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.14-1.mga8"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.8-10.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.8-11.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.8-12.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-17.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xdmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xephyr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xnest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xorg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xvfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xwayland-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-Xwayland-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-Xdmx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-Xephyr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-Xnest-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-Xorg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-Xvfb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"xorg-x11-server-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.11-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xorg-x11-server-Xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.1.3-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-14.5.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-14.5.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-14.5.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-14.5.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-14.5.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-14.5.22.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xorg-server-hwe-18.04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.8-2ubuntu2.2~18.04.6"}]}],"versions":["2:1.20.1-3ubuntu2.1~18.04.1","2:1.20.4-1ubuntu3~18.04.1","2:1.20.5+git20191008-0ubuntu1~18.04.1","2:1.20.8-2ubuntu2.1~18.04.1","2:1.20.8-2ubuntu2.2~18.04.1","2:1.20.8-2ubuntu2.2~18.04.2","2:1.20.8-2ubuntu2.2~18.04.3","2:1.20.8-2ubuntu2.2~18.04.4","2:1.20.8-2ubuntu2.2~18.04.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.13-1ubuntu1~20.04.2"}]}],"versions":["2:1.20.5+git20191008-0ubuntu1","2:1.20.6-1ubuntu1","2:1.20.7-2ubuntu1","2:1.20.7-2ubuntu2","2:1.20.8-2ubuntu2","2:1.20.8-2ubuntu2.1","2:1.20.8-2ubuntu2.2","2:1.20.8-2ubuntu2.3","2:1.20.8-2ubuntu2.4","2:1.20.8-2ubuntu2.6","2:1.20.9-2ubuntu1.1~20.04.1","2:1.20.9-2ubuntu1.2~20.04.1","2:1.20.9-2ubuntu1.2~20.04.2","2:1.20.11-1ubuntu1~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.13-1ubuntu2"}]}],"versions":["2:1.20.13-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.1.3-1ubuntu1"}]}],"versions":["2:21.1.2-0ubuntu1","2:21.1.3-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.19.6-1ubuntu4.10"}]}],"versions":["2:1.19.5-0ubuntu2","2:1.19.6-1ubuntu1","2:1.19.6-1ubuntu2","2:1.19.6-1ubuntu3","2:1.19.6-1ubuntu4","2:1.19.6-1ubuntu4.1","2:1.19.6-1ubuntu4.2","2:1.19.6-1ubuntu4.3","2:1.19.6-1ubuntu4.4","2:1.19.6-1ubuntu4.5","2:1.19.6-1ubuntu4.6","2:1.19.6-1ubuntu4.7","2:1.19.6-1ubuntu4.8","2:1.19.6-1ubuntu4.9"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xorg-server-hwe-18.04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.8-2ubuntu2.2~18.04.6"}]}],"versions":["2:1.20.1-3ubuntu2.1~18.04.1","2:1.20.4-1ubuntu3~18.04.1","2:1.20.5+git20191008-0ubuntu1~18.04.1","2:1.20.8-2ubuntu2.1~18.04.1","2:1.20.8-2ubuntu2.2~18.04.1","2:1.20.8-2ubuntu2.2~18.04.2","2:1.20.8-2ubuntu2.2~18.04.3","2:1.20.8-2ubuntu2.2~18.04.4","2:1.20.8-2ubuntu2.2~18.04.5"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xorg-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.20.13-1ubuntu1~20.04.2"}]}],"versions":["2:1.20.5+git20191008-0ubuntu1","2:1.20.6-1ubuntu1","2:1.20.7-2ubuntu1","2:1.20.7-2ubuntu2","2:1.20.8-2ubuntu2","2:1.20.8-2ubuntu2.1","2:1.20.8-2ubuntu2.2","2:1.20.8-2ubuntu2.3","2:1.20.8-2ubuntu2.4","2:1.20.8-2ubuntu2.6","2:1.20.9-2ubuntu1.1~20.04.1","2:1.20.9-2ubuntu1.2~20.04.1","2:1.20.9-2ubuntu1.2~20.04.2","2:1.20.11-1ubuntu1~20.04.2"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-lp152.8.36.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-22.5.42.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xorg-x11-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.2-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.1.4-1.1"}]}],"bundled":4}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"the xorg project","product":"xorg-x11-server"},{"vendor":"x.org","product":"x_server"}],"references":[{"url":"https://lists.x.org/archives/xorg-announce/2021-December/003122.html","tags":["x_transferred","Vendor Advisory","advisory","article"]},{"url":"https://lists.x.org/archives/xorg-announce/2021-December/003124.html","tags":["x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDHYZM6FII35JA7J275MFCJO6ADJUPQX/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T57DCF726O5LLTST4NBL5PQ7DLPB46HT/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1549/","tags":["x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.debian.org/security/2021/dsa-5027","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NKLSZCY47QK4RCJFXITYFALCGPJAFXOK/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXTRPFEQLFZ6NT2LPLZEID664RGC3OCC/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220114-0004/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202305-30","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4010","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PDHYZM6FII35JA7J275MFCJO6ADJUPQX/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57DCF726O5LLTST4NBL5PQ7DLPB46HT/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NKLSZCY47QK4RCJFXITYFALCGPJAFXOK/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NXTRPFEQLFZ6NT2LPLZEID664RGC3OCC/"},{"url":"https://github.com/advisories/GHSA-3qwg-vch4-4r45"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-4010","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1917","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4008","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4009","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4010","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4011","tags":["report"]},{"url":"https://bugzilla.redhat.com/2026059","tags":["report"]},{"url":"https://bugzilla.redhat.com/2026072","tags":["report"]},{"url":"https://bugzilla.redhat.com/2026073","tags":["report"]},{"url":"https://bugzilla.redhat.com/2026074","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-1917.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-4008","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-4009","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-4010","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-4011","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-4010","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-4010","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0573.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29767","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4008","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4011","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1949","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0003","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026074","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0003.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4008","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4009","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4010","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4011","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2046329","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1917.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:1917","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20214122-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1190487","tags":["report"]},{"url":"https://bugzilla.suse.com/1190488","tags":["report"]},{"url":"https://bugzilla.suse.com/1190489","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4011","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20214136-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20214136-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4010","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2021/12/14/1","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5193-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-4009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-4011","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RT7VTD4IRUBMN3UEKSRY3O2T37GG2HLZ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UZYVYA6ZP6W2WXZYY7EDCELC7CJ7FSVU/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4008","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-4010","description":"A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-12-17T00:00:00Z","modified":"2024-08-03T17:16:03.009Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:33:07.697752Z"}],"euvd":[{"id":"EUVD-2021-33916","description":"A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-12-17T00:00:00Z","modified":"2024-08-03T17:16:03Z","updated_at":"2026-11-03T03:25:10.888157Z"}],"ghsa":[{"id":"GHSA-3qwg-vch4-4r45","title":"A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...","description":"A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-12-18T00:00:42Z","modified":"2023-06-08T05:00:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:54:38.286464Z"}],"nvd":[{"id":"CVE-2021-4010","description":"A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-12-17T17:15:13.473Z","modified":"2026-06-17T04:18:53.66Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:07:02.566991Z"}],"osv":[{"id":"ALPINE-CVE-2021-4010","description":"A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-12-17T17:15:13.473Z","modified":"2026-11-03T06:31:45.564460648Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"BELL-CVE-2021-4010","title":"CVE-2021-4010 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:49.337253Z","modified":"2026-01-26T09:47:16.767981Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-4010","description":"A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-12-17T17:15:13.473Z","modified":"2026-04-16T04:32:12.551744572Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-4010","description":"A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-12-17T17:15:13.473Z","modified":"2026-10-23T18:03:32.702706101Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"OESA-2021-1468","title":"xorg-x11-server security update","description":"Xorg server common files.\r\n\r\nSecurity Fix(es):\r\n\r\nA security issue has been found in X.Org before version 21.1.2 and Xwayland before version 21.1.4. The handler for the CompositeGlyphs request of the Render extension does not properly validate the request length leading to out of bounds memory write. This can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for SSH X forwarding sessions.(CVE-2021-4008)\r\n\r\nA security issue has been found in X.Org before version 21.1.2 and Xwayland before version 21.1.4. The handler for the CreatePointerBarrier request of the XFixes extension does not properly validate the request length leading to out of bounds memory write. This can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for SSH X forwarding sessions.(CVE-2021-4009)\r\n\r\nA security issue has been found in X.Org before version 21.1.2 and Xwayland before version 21.1.4. The handler for the Suspend request of the Screen Saver extension does not properly validate the request length leading to an out of bounds memory write. This can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for SSH X forwarding sessions.(CVE-2021-4010)\r\n\r\nA security issue has been found in X.Org before version 21.1.2 and Xwayland before version 21.1.4. The handlers for the RecordCreateContext and RecordRegisterClients requests of the Record extension do not properly validate the request length leading to an out of bounds memory write. This can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for SSH X forwarding sessions.(CVE-2021-4011)","status":"published","published":"2021-12-24T11:04:44Z","modified":"2026-08-18T01:16:14.150542318Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"OESA-2022-1949","title":"xorg-x11-server security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-4008)\r\n\r\nA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcXFixesCreatePointerBarrier function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-4009)\r\n\r\nA security issue has been found in X.Org before version 21.1.2 and Xwayland before version 21.1.4. The handler for the Suspend request of the Screen Saver extension does not properly validate the request length leading to an out of bounds memory write. This can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for SSH X forwarding sessions.(CVE-2021-4010)\r\n\r\nA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SwapCreateRegister function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-4011)","status":"published","published":"2022-09-23T11:05:15Z","modified":"2026-08-18T01:17:18.011804919Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:0003","title":"Red Hat Security Advisory: xorg-x11-server security update","status":"published","published":"2024-09-16T07:01:28Z","modified":"2026-06-26T12:22:10.059767007Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1917","title":"Red Hat Security Advisory: xorg-x11-server and xorg-x11-server-Xwayland security update","status":"published","published":"2024-09-16T07:01:36Z","modified":"2026-06-26T12:21:17.65822348Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:1917","title":"Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update","description":"X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.\n\nXwayland is an X server for running X clients under Wayland.\n\nThe following packages have been upgraded to a later upstream version: xorg-x11-server-Xwayland (21.1.3). (BZ#2015842)\n\nSecurity Fix(es):\n\n* xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access (CVE-2021-4008)\n\n* xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access (CVE-2021-4009)\n\n* xorg-x11-server: SProcScreenSaverSuspend out-of-bounds access (CVE-2021-4010)\n\n* xorg-x11-server: SwapCreateRegister out-of-bounds access (CVE-2021-4011)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.","status":"published","published":"2022-05-10T08:07:43Z","modified":"2026-02-04T11:15:10.174683Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-4010","description":"A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-12-14T12:00:00Z","modified":"2026-04-22T13:01:00.366175Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"ALSA-2022:1917","title":"Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update","description":"X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.\n\nXwayland is an X server for running X clients under Wayland.\n\nThe following packages have been upgraded to a later upstream version: xorg-x11-server-Xwayland (21.1.3). (BZ#2015842)\n\nSecurity Fix(es):\n\n* xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access (CVE-2021-4008)\n\n* xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access (CVE-2021-4009)\n\n* xorg-x11-server: SProcScreenSaverSuspend out-of-bounds access (CVE-2021-4010)\n\n* xorg-x11-server: SwapCreateRegister out-of-bounds access (CVE-2021-4011)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-05-10T00:00:00Z","modified":"2026-10-29T11:01:16.577370986Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DSA-5027-1","title":"xorg-server - security update","status":"published","published":"2021-12-21T00:00:00Z","modified":"2026-03-09T02:09:13.621803Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2021-0573","title":"Updated x11-server packages fix security vulnerabilities","description":"Updated x11-server packages fix security vulnerabilities:\n\nThe handler for the CompositeGlyphs request of the Render extension does\nnot properly validate the request length leading to out of bounds memory\nwrite (CVE-2021-4008).\n\nThe handler for the CreatePointerBarrier request of the XFixes extension\ndoes not properly validate the request length leading to out of bounds\nmemory write (CVE-2021-4009).\n\nThe handler for the Suspend request of the Screen Saver extension does\nnot properly validate the request length leading to out of bounds memory\nwrite (CVE-2021-4010).\n\nThe handlers for the RecordCreateContext and RecordRegisterClients\nrequests of the Record extension do not properly validate the request\nlength leading to out of bounds memory write (CVE-2021-4011).\n\nAll of these issues can lead to local privileges elevation on systems\nwhere the X server is running privileged and remote code execution for\nssh X forwarding sessions.\n","status":"published","published":"2021-12-21T23:27:37Z","modified":"2026-04-16T04:42:24.641218279Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:1606-1","title":"Security update for xorg-x11-server","description":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes \n  extension does not properly validate the request length leading to out of \n  bounds memory write. (bsc#1190487)\n- CVE-2021-4010: The handler for the Suspend request of the Screen Saver extension\n  does not properly validate the request length leading to out of\n  bounds memory write. (bsc#1190488)\n- CVE-2021-4011: The handlers for the RecordCreateContext and RecordRegisterClients\n  requests of the Record extension do not properly validate the request\n  length leading to out of bounds memory write. (bsc#1190489)\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-12-22T06:11:45Z","modified":"2026-02-04T02:54:55.781174Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:4136-1","title":"Security update for xorg-x11-server","description":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes \n  extension does not properly validate the request length leading to out of \n  bounds memory write. (bsc#1190487)\n- CVE-2021-4010: The handler for the Suspend request of the Screen Saver extension\n  does not properly validate the request length leading to out of\n  bounds memory write. (bsc#1190488)\n- CVE-2021-4011: The handlers for the RecordCreateContext and RecordRegisterClients\n  requests of the Record extension do not properly validate the request\n  length leading to out of bounds memory write. (bsc#1190489)\n","status":"published","published":"2021-12-21T14:34:03Z","modified":"2026-02-04T03:20:12.22848Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:11685-1","title":"xorg-x11-server-21.1.2-1.1 on GA media","description":"These are all security issues fixed in the xorg-x11-server-21.1.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:31:46.504799Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11699-1","title":"xwayland-21.1.4-1.1 on GA media","description":"These are all security issues fixed in the xwayland-21.1.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:36:21.619914Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:4122-1","title":"Security update for xorg-x11-server","description":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes \n  extension does not properly validate the request length leading to out of \n  bounds memory write. (bsc#1190487)\n- CVE-2021-4010: The handler for the Suspend request of the Screen Saver extension\n  does not properly validate the request length leading to out of\n  bounds memory write. (bsc#1190488)\n- CVE-2021-4011: The handlers for the RecordCreateContext and RecordRegisterClients\n  requests of the Record extension do not properly validate the request\n  length leading to out of bounds memory write. (bsc#1190489)\n","status":"published","published":"2021-12-20T11:54:49Z","modified":"2026-02-04T04:33:57.994761Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2021:4136-1","title":"Security update for xorg-x11-server","description":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes \n  extension does not properly validate the request length leading to out of \n  bounds memory write. (bsc#1190487)\n- CVE-2021-4010: The handler for the Suspend request of the Screen Saver extension\n  does not properly validate the request length leading to out of\n  bounds memory write. (bsc#1190488)\n- CVE-2021-4011: The handlers for the RecordCreateContext and RecordRegisterClients\n  requests of the Record extension do not properly validate the request\n  length leading to out of bounds memory write. (bsc#1190489)\n","status":"published","published":"2021-12-21T14:34:23Z","modified":"2026-02-04T04:14:49.891571Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2021:4136-2","title":"Security update for xorg-x11-server","description":"This update for xorg-x11-server fixes the following issues:\n\n- CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes \n  extension does not properly validate the request length leading to out of \n  bounds memory write. (bsc#1190487)\n- CVE-2021-4010: The handler for the Suspend request of the Screen Saver extension\n  does not properly validate the request length leading to out of\n  bounds memory write. (bsc#1190488)\n- CVE-2021-4011: The handlers for the RecordCreateContext and RecordRegisterClients\n  requests of the Record extension do not properly validate the request\n  length leading to out of bounds memory write. (bsc#1190489)\n","status":"published","published":"2022-02-17T07:41:03Z","modified":"2026-02-04T04:40:04.647473Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"USN-5193-1","title":"xorg-server, xorg-server-hwe-18.04, xwayland vulnerabilities","description":"Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled\ncertain inputs. An attacker could use this issue to cause the server to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode and escalate privileges.\n","status":"published","published":"2021-12-14T18:13:20Z","modified":"2026-04-22T10:19:45.411051Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}