A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr | May 13, 2022 | Dec 17, 2021 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 22, 2024 | Dec 17, 2021 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest | Jul 4, 2022 | Dec 17, 2021 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfo | Feb 17, 2025 | Dec 14, 2021 |
| Centos_linux | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xdmx-debuginfo | Feb 17, 2022 | Dec 17, 2021 |
| Debian | — | Upgrade xwaylandUpgrade xorg-server | Dec 23, 2021 | Dec 17, 2021 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | May 31, 2023 | Dec 17, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade xorg-x11-server-help | Apr 20, 2022 | Dec 17, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade xorg-x11-server-common | Mar 29, 2022 | Dec 17, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade xorg-x11-server-help | Mar 3, 2022 | Dec 17, 2021 |
| Oracle Solaris | — | Upgrade desktop/remote-desktop/tigervnc to version 1.10.1-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xorg/driver/xorg-video to version 11.4-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/modeline-utilities to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xephyr to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xvnc to version 1.10.1-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xvfb to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xdmx to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xserver-common to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4Upgrade x11/server/xorg to version 1.20.13-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Dec 17, 2021 |
| Oracle_linux | — | Upgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xorg | Jan 5, 2022 | Dec 14, 2021 |
| Redhat_linux | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debugsourceNo solution existsUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xdmx-debuginfo | Jan 4, 2022 | Dec 17, 2021 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland | Mar 5, 2024 | Dec 17, 2021 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-Xvfb | Dec 21, 2021 | Dec 14, 2021 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04Upgrade xserver-xorg-coreUpgrade xwayland | Dec 15, 2021 | Dec 14, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub