CVE-2021-4008

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Score

CVSS 3.1 7.8 High

Status

Modified - secalert@redhat.com

Published

2021-12-17

Last modified

2024-08-03

Weaknesses

CWE-119

Affected products

• Debian Linux (Debian)
• Fedora (Fedoraproject)
• X Server (X.org)

References

• https://lists.debian.org/debian-lts-announce/2021/12/msg00035.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NKLSZCY47QK4RCJFXITYFA…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXTRPFEQLFZ6NT2LPLZEID…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDHYZM6FII35JA7J275MFC…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T57DCF726O5LLTST4NBL5P…
• https://lists.x.org/archives/xorg-announce/2021-December/003122.html
• https://lists.x.org/archives/xorg-announce/2021-December/003124.html
• https://security.gentoo.org/glsa/202305-30
• https://security.netapp.com/advisory/ntap-20220114-0004/
• https://www.debian.org/security/2021/dsa-5027
• https://www.zerodayinitiative.com/advisories/ZDI-21-1547/