Vulnerability · Published Dec 17, 2021 · Assigned by redhat
CVE-2021-4009
High 7.8
In plain English
A high-severity memory corruption in xorg-x11-server. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.6%top 50.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcXFixesCreatePointerBarrier function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | xorg-x11-server-Xdmx | 1.20.11-5.el8 | ALSA-2022:1917 |
| AlmaLinux:8 | xorg-x11-server-Xephyr | 1.20.11-5.el8 | ALSA-2022:1917 |
| AlmaLinux:8 | xorg-x11-server-Xnest | 1.20.11-5.el8 | ALSA-2022:1917 |
| AlmaLinux:8 | xorg-x11-server-Xorg | 1.20.11-5.el8 | ALSA-2022:1917 |
| AlmaLinux:8 | xorg-x11-server-Xvfb | 1.20.11-5.el8 | ALSA-2022:1917 |
| AlmaLinux:8 | xorg-x11-server-Xwayland | 21.1.3-2.el8 | ALSA-2022:1917 |
| AlmaLinux:8 | xorg-x11-server-common | 1.20.11-5.el8 | ALSA-2022:1917 |
| AlmaLinux:8 | xorg-x11-server-devel | 1.20.11-5.el8 | ALSA-2022:1917 |
| AlmaLinux:8 | xorg-x11-server-devel | 1.20.11-5.el8_6.2 | ALSA-2022:1917 |
| AlmaLinux:8 | xorg-x11-server-source | 1.20.11-5.el8 | ALSA-2022:1917 |
| Alpine:v3.20 | xorg-server | 21.1.2-r0 | ALPINE-CVE-2021-4009 |
| Alpine:v3.21 | xorg-server | 21.1.2-r0 | ALPINE-CVE-2021-4009 |
| Alpine:v3.22 | xorg-server | 21.1.2-r0 | ALPINE-CVE-2021-4009 |
| Alpine:v3.23 | xorg-server | 21.1.2-r0 | ALPINE-CVE-2021-4009 |
| Alpine:v3.24 | xorg-server | 21.1.2-r0 | ALPINE-CVE-2021-4009 |
| Alpine:v3.20 | xwayland | 21.1.4-r0 | ALPINE-CVE-2021-4009 |
| Alpine:v3.21 | xwayland | 21.1.4-r0 | ALPINE-CVE-2021-4009 |
| Alpine:v3.22 | xwayland | 21.1.4-r0 | ALPINE-CVE-2021-4009 |
| Alpine:v3.23 | xwayland | 21.1.4-r0 | ALPINE-CVE-2021-4009 |
| Alpine:v3.24 | xwayland | 21.1.4-r0 | ALPINE-CVE-2021-4009 |
| Debian:12 | xorg-server | 2:1.20.13-3 | DEBIAN-CVE-2021-4009 |
| Debian:13 | xorg-server | 2:1.20.13-3 | DEBIAN-CVE-2021-4009 |
| Debian:14 | xorg-server | 2:1.20.13-3 | DEBIAN-CVE-2021-4009 |
| Debian:12 | xwayland | 2:21.1.4-1 | DEBIAN-CVE-2021-4009 |
| Debian:13 | xwayland | 2:21.1.4-1 | DEBIAN-CVE-2021-4009 |
| Debian:14 | xwayland | 2:21.1.4-1 | DEBIAN-CVE-2021-4009 |
| Rocky Linux:8 | xorg-x11-server | 0:1.20.11-5.el8 | RLSA-2022:1917 |
| Rocky Linux:8 | xorg-x11-server-Xwayland | 0:21.1.3-2.el8 | RLSA-2022:1917 |
| Ubuntu:22.04:LTS | xorg-server | 2:1.20.13-1ubuntu2 | UBUNTU-CVE-2021-4009 |
| Ubuntu:22.04:LTS | xwayland | 2:21.1.3-1ubuntu1 | UBUNTU-CVE-2021-4009 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | xorg-x11-server | xorg-x11-server 21.1.2, xorg-x11-server 1.20.14 |
Weakness: CWE-119
References
- https://lists.x.org/archives/xorg-announce/2021-December/003122.html
- https://lists.x.org/archives/xorg-announce/2021-December/003124.html
- FEDORA-2021-2eb603951b vendor-advisory
- FEDORA-2021-a7fd510294 vendor-advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-1548/
- DSA-5027 vendor-advisory
- [debian-lts-announce] 20211229 [SECURITY] [DLA 2869-1] xorg-server security update mailing-list
- FEDORA-2021-69e96c8f68 vendor-advisory
- FEDORA-2021-664a6554a1 vendor-advisory
- https://security.netapp.com/advisory/ntap-20220114-0004/
- GLSA-202305-30 vendor-advisory