Summary
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled
certain lengths of XInput extension ChangeFeedbackControl requests. An
attacker could use this issue to cause the server to crash, resulting in a
denial of service, or possibly execute arbitrary code.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | xorg-server | 2:1.18.4-0ubuntu0.12 |
| Ubuntu · 16.04 LTS 16.04:LTS | xorg-server-hwe-16.04 | 2:1.19.6-1ubuntu4.1~16.04.6 |
| Ubuntu · 18.04 LTS 18.04:LTS | xorg-server | 2:1.19.6-1ubuntu4.9 |
| Ubuntu · 18.04 LTS 18.04:LTS | xorg-server-hwe-18.04 | 2:1.20.8-2ubuntu2.2~18.04.5 |
| Ubuntu · 20.04 LTS 20.04:LTS | xorg-server | 2:1.20.9-2ubuntu1.2~20.04.2 |
Vulnerabilities 1
-
Unscored —
A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lea…
References
-
report
https://ubuntu.com/security/CVE-2021-3472