{"id":"CVE-2021-3472","details":"A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","modified":"2026-08-07T17:02:16.776439Z","published":"2021-04-26T15:15:07.857Z","related":["SUSE-SU-2021:1179-1","SUSE-SU-2021:1180-1","SUSE-SU-2021:1181-1","SUSE-SU-2021:1182-1","SUSE-SU-2021:1187-1","SUSE-SU-2021:1188-1","SUSE-SU-2021:14690-1","openSUSE-SU-2021:0554-1","openSUSE-SU-2024:11525-1","openSUSE-SU-2024:11528-1"],"database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"},{"introduced":"10.0"},{"last_affected":"10.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"]},{"vendor_product":"fedoraproject:fedora","cpes":["cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"32"},{"last_affected":"32"},{"introduced":"33"},{"last_affected":"33"},{"introduced":"34"},{"last_affected":"34"}],"source":"CPE_STRING"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux"}]},"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDF7TAJE7NPZPNVOXSD5HBIFLNPUOD2V/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6S5OPXUDYBSRSVWVLFLJ6AFERG4HNY/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N63KL3T22HNFT4FJ7VMVF6U5Q4RFJIQF/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEXPCLMVU25AUZTUXC4MYBGPKOAIM5TW/"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/04/msg00013.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202104-02"},{"type":"ADVISORY","url":"https://www.debian.org/security/2021/dsa-4893"},{"type":"ADVISORY","url":"https://www.tenable.com/plugins/nessus/148701"},{"type":"ADVISORY","url":"https://www.zerodayinitiative.com/advisories/ZDI-21-463/"},{"type":"FIX","url":"http://www.openwall.com/lists/oss-security/2021/04/13/1"},{"type":"FIX","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944167"},{"type":"FIX","url":"https://gitlab.freedesktop.org/xorg/xserver/-/commit/7aaf54a1884f71dc363f0b884e57bcb67407a6cd"},{"type":"FIX","url":"https://lists.x.org/archives/xorg-announce/2021-April/003080.html"},{"type":"FIX","url":"https://seclists.org/oss-sec/2021/q2/20"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.freedesktop.org/xorg/xserver","events":[{"introduced":"0"},{"fixed":"6b767cdf6574081164aa6c6a7b617cda579b84c6"},{"introduced":"0d7ec5c7d9b451066a079fe56bcc9722341a91ff"},{"last_affected":"0d7ec5c7d9b451066a079fe56bcc9722341a91ff"},{"fixed":"7aaf54a1884f71dc363f0b884e57bcb67407a6cd"}],"database_specific":{"cpe":["cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"fixed":"1.20.11"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"]}}],"versions":["7.0","xorg-server-1.20.10","xorg-server-1.20.9","xorg-server-1.20.8","xorg-server-1.20.7","xorg-server-1.20.6","xorg-server-1.20.5","xorg-server-1.20.4","xorg-server-1.20.3","xorg-server-1.20.2","xorg-server-1.20.1","xorg-server-1.20.0","xorg-server-1.19.99.905","xorg-server-1.19.99.904","xorg-server-1.19.99.903","xorg-server-1.19.99.902","xorg-server-1.19.99.901","xorg-server-1.19.0","xorg-server-1.18.99.902","xorg-server-1.18.99.901","xorg-server-1.18.99.2","xorg-server-1.18.0","xorg-server-1.17.99.902","xorg-server-1.17.99.901","xorg-server-1.17.0","xorg-server-1.16.99.902","xorg-server-1.16.99.901","xorg-server-1.16.0","xorg-server-1.15.99.904","xorg-server-1.15.99.903","xorg-server-1.15.99.902","xorg-server-1.15.99.901","xorg-server-1.15.0","xorg-server-1.14.99.905","xorg-server-1.14.99.904","xorg-server-1.14.99.903","xorg-server-1.14.99.902","xorg-server-1.14.99.901","xorg-server-1.14.99.3","xorg-server-1.14.99.2","xorg-server-1.14.99.1","xorg-server-1.14.0","xorg-server-1.13.99.902","xorg-server-1.13.99.901","xorg-server-1.13.0","xorg-server-1.12.99.905","xorg-server-1.12.99.904","xorg-server-1.12.99.903","xorg-server-1.12.99.902","xorg-server-1.12.99.901","xorg-server-1.12.0","xorg-server-1.11.99.903","xorg-server-1.11.99.902","xorg-server-1.11.99.901","xorg-server-1.11.99.1","xorg-server-1.11.0","xorg-server-1.10.99.902","xorg-server-1.10.99.901","xorg-server-1.10.0","xorg-server-1.9.99.903","xorg-server-1.9.99.902","xorg-server-1.9.99.901","xorg-server-1.9.0","xorg-server-1.8.99.906","xorg-server-1.8.99.905","xorg-server-1.8.99.904","xorg-server-1.8.99.903","xorg-server-1.8.99.902","xorg-server-1.8.99.901","xorg-server-1.8.0","xorg-server-1.7.99.902","xorg-server-1.7.99.901","xorg-server-1.7.99.2","xorg-server-1.7.99.1","xorg-server-1.6.99.901","xorg-server-1.6.99.900","xorg-server-1.5.99.1","xorg-server-1.1.99.3","xorg-server-1_1_99_2","xorg-server-1_0_99_901","XORG-7_0_99_901","xorg-server-1_1_99_1","xorg-server-1_0_99_2","xorg-server-1_0_99_1","XORG-7_0","pre-xgldrop-merge"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3472.json","vanir_signatures_modified":"2026-08-07T17:02:16Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["292591907350474845185383934296722325623","303364087205550092765687958017342392166","19102639589196602912811957206626347227","255171885618665939205673060985879529004"],"threshold":0.9},"id":"CVE-2021-3472-405cf82e","signature_type":"Line","signature_version":"v1","source":"https://gitlab.freedesktop.org/xorg/xserver@7aaf54a1884f71dc363f0b884e57bcb67407a6cd","target":{"file":"Xi/chgfctl.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://gitlab.freedesktop.org/xorg/xserver@7aaf54a1884f71dc363f0b884e57bcb67407a6cd","target":{"file":"Xi/chgfctl.c","function":"ProcXChangeFeedbackControl"},"deprecated":false,"digest":{"function_hash":"226544378372652833531133305372092978257","length":2476},"id":"CVE-2021-3472-afb01050"}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}