ELSA-2021-2033

Опубликовано: 19 мая 2021

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2021-2033: xorg-x11-server security update (IMPORTANT)

[1.20.4-16]

CVE fix for: CVE-2021-3472 (#1944956)

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

xorg-x11-server-Xdmx

1.20.4-16.el7_9

xorg-x11-server-Xephyr

1.20.4-16.el7_9

xorg-x11-server-Xnest

1.20.4-16.el7_9

xorg-x11-server-Xorg

1.20.4-16.el7_9

xorg-x11-server-Xvfb

1.20.4-16.el7_9

xorg-x11-server-Xwayland

1.20.4-16.el7_9

xorg-x11-server-common

1.20.4-16.el7_9

xorg-x11-server-devel

1.20.4-16.el7_9

xorg-x11-server-source

1.20.4-16.el7_9

Oracle Linux x86_64

xorg-x11-server-Xdmx

1.20.4-16.el7_9

xorg-x11-server-Xephyr

1.20.4-16.el7_9

xorg-x11-server-Xnest

1.20.4-16.el7_9

xorg-x11-server-Xorg

1.20.4-16.el7_9

xorg-x11-server-Xvfb

1.20.4-16.el7_9

xorg-x11-server-Xwayland

1.20.4-16.el7_9

xorg-x11-server-common

1.20.4-16.el7_9

xorg-x11-server-devel

1.20.4-16.el7_9

xorg-x11-server-source

1.20.4-16.el7_9

Связанные CVE

CVE-2021-3472

Ссылки на источники

Связанные уязвимости

CVE-2021-3472

CVSS3: 7.8

ubuntu

почти 5 лет назад

A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.