A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx | May 13, 2022 | Dec 17, 2021 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 22, 2024 | Dec 17, 2021 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debuginfo | Jul 4, 2022 | Dec 17, 2021 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfo | Feb 17, 2025 | Dec 14, 2021 |
| Centos_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xephyr | Feb 17, 2022 | Dec 17, 2021 |
| Debian | — | Upgrade xorg-serverUpgrade xwayland | Dec 23, 2021 | Dec 17, 2021 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | May 31, 2023 | Dec 17, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Apr 20, 2022 | Dec 17, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade xorg-x11-server-common | May 25, 2022 | Dec 17, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade xorg-x11-server-common | Mar 2, 2022 | Dec 17, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Mar 3, 2022 | Dec 17, 2021 |
| Oracle Solaris | — | Upgrade x11/server/xserver-common to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xvnc to version 1.10.1-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Dec 17, 2021 |
| Oracle_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-source | Jan 5, 2022 | Dec 14, 2021 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xorg-debuginfoNo solution existsUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xdmx | Jan 4, 2022 | Dec 17, 2021 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland | Mar 5, 2024 | Dec 17, 2021 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-xvnc | Dec 15, 2021 | Dec 14, 2021 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-core-hwe-18.04 | Dec 15, 2021 | Dec 14, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub