CVE-2021-3472

xdmx: A flaw was found in xorg-x11-server in versions before 1.20.11

CVE-2021-3472 is fixed in 18 products on 1 platform, first by xdmx 2:1.19.6-1ubuntu4.9, released April 13, 2021. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0105
64th percentile

A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Where it's fixed

ProductFixed inFixReleased
Linux
xdmx · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xdmx 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xdmx · Ubuntu 20.04 LTS (focal) 2:1.20.9-2ubuntu1.2~20.04.2 xdmx 2:1.20.9-2ubuntu1.2~20.04.2 Apr 13, 2021
xdmx-tools · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xdmx-tools 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xdmx-tools · Ubuntu 20.04 LTS (focal) 2:1.20.9-2ubuntu1.2~20.04.2 xdmx-tools 2:1.20.9-2ubuntu1.2~20.04.2 Apr 13, 2021
xmir · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xmir 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xnest · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xnest 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xnest · Ubuntu 20.04 LTS (focal) 2:1.20.9-2ubuntu1.2~20.04.2 xnest 2:1.20.9-2ubuntu1.2~20.04.2 Apr 13, 2021
xorg-server-source · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xorg-server-source 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xorg-server-source · Ubuntu 20.04 LTS (focal) 2:1.20.9-2ubuntu1.2~20.04.2 xorg-server-source 2:1.20.9-2ubuntu1.2~20.04.2 Apr 13, 2021
xorg-server-source-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.5 xorg-server-source-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.5 Apr 13, 2021
xserver-common · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xserver-common 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xserver-common · Ubuntu 20.04 LTS (focal) 2:1.20.9-2ubuntu1.2~20.04.2 xserver-common 2:1.20.9-2ubuntu1.2~20.04.2 Apr 13, 2021
xserver-xephyr · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xserver-xephyr 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xserver-xephyr · Ubuntu 20.04 LTS (focal) 2:1.20.9-2ubuntu1.2~20.04.2 xserver-xephyr 2:1.20.9-2ubuntu1.2~20.04.2 Apr 13, 2021
xserver-xephyr-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.5 xserver-xephyr-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.5 Apr 13, 2021
xserver-xorg-core · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xserver-xorg-core 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xserver-xorg-core · Ubuntu 20.04 LTS (focal) 2:1.20.9-2ubuntu1.2~20.04.2 xserver-xorg-core 2:1.20.9-2ubuntu1.2~20.04.2 Apr 13, 2021
xserver-xorg-core-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.5 xserver-xorg-core-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.5 Apr 13, 2021
xserver-xorg-dev-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.5 xserver-xorg-dev-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.5 Apr 13, 2021
xserver-xorg-legacy · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xserver-xorg-legacy 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xserver-xorg-legacy · Ubuntu 20.04 LTS (focal) 2:1.20.9-2ubuntu1.2~20.04.2 xserver-xorg-legacy 2:1.20.9-2ubuntu1.2~20.04.2 Apr 13, 2021
xserver-xorg-legacy-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.5 xserver-xorg-legacy-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.5 Apr 13, 2021
xserver-xorg-xmir · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xserver-xorg-xmir 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xvfb · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xvfb 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xvfb · Ubuntu 20.04 LTS (focal) 2:1.20.9-2ubuntu1.2~20.04.2 xvfb 2:1.20.9-2ubuntu1.2~20.04.2 Apr 13, 2021
xwayland · Ubuntu 18.04.6 LTS (bionic) 2:1.19.6-1ubuntu4.9 xwayland 2:1.19.6-1ubuntu4.9 Apr 13, 2021
xwayland · Ubuntu 20.04 LTS (focal) 2:1.20.9-2ubuntu1.2~20.04.2 xwayland 2:1.20.9-2ubuntu1.2~20.04.2 Apr 13, 2021
xwayland-hwe-18.04 · Ubuntu 18.04.6 LTS (bionic) 2:1.20.8-2ubuntu2.2~18.04.5 xwayland-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.5 Apr 13, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.