Local Privilege Escalation Vulnerability in xorg-server - CVE-2021-3472
Summary
ALPINE-CVE-2021-3472: A flaw was found in xorg-x11-server in versions before 1.20.11. Affects xorg-server versions < 1.20.5-r3. Fixed in 1.20.5-r3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
xorg-server is a core component of the X Window System, which provides the graphical interface for Unix-like operating systems. It is responsible for managing display, input devices, and rendering graphics. The package is widely used in various Linux distributions, including Alpine Linux. The vulnerability in question affects multiple versions of xorg-server, making it critical for users to be aware of its implications.
Vulnerability Detail
A flaw was discovered in xorg-x11-server versions prior to 1.20.11, where an integer underflow can occur in the xserver. This vulnerability can lead to local privilege escalation, allowing an attacker to gain unauthorized access to system resources. The highest threat from this vulnerability is to data confidentiality, integrity, and system availability, potentially compromising the entire system.
How To Fix
Minimum fixed version
1.20.5-r3
This is the first release that contains the fix.
sudo apk add --upgrade xorg-serverTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider restricting access to the xorg-server or running it in a more secure environment to mitigate the risk of exploitation until the package can be updated.
Conclusion
CVE-2021-3472 represents a significant security risk for systems using vulnerable versions of xorg-server. Users are strongly advised to update their packages to the latest versions to mitigate the risk of local privilege escalation and protect their systems from potential exploitation.
See every vulnerability recorded for xorg-server →
FAQ
CVE-2021-3472 is a vulnerability in the xorg-server package that allows for local privilege escalation due to an integer underflow.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor for open-source vulnerabilities without requiring a signup.
The vulnerability can lead to unauthorized access to system resources, compromising data confidentiality, integrity, and system availability.
The CVSS score for CVE-2021-3472 is 7.8, indicating a high severity level.
The best protection is to update the xorg-server package to the latest patched version as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for xorg-server.
