7.8

CVE-2021-3472: debian debian_linux Integer Underflow (Wrap or Wraparound)

CVSS: 7.8v3.1HighModified
AliasesALPINE-CVE-2021-3472MGASA-2021-0190SUSE-SU-2021:1179-1
Published 26-04-2021Last modified 03-08-2024
Open JSON

Vulnerability summary

CVE-2021-3472 is a high (CVSS 7.8) Integer Underflow (Wrap or Wraparound) vulnerability in debian debian_linux. EPSS estimates a 1.05% chance of exploitation in the next 30 days, higher than 63.7% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (NVD)
EPSS score
1.05%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2024:11525-1

Timeline

  1. 26-04-2021
    PublishedVulnerability first disclosed.
  2. 03-08-2024
    Last modifiedVulnerability information updated.

Description

A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS metrics

6 scores · 5 sources · 2 versions

EPSS trend

Probability

1.05%

Chance of exploitation in the next 30 days

Percentile

64%

Versus all other CVEs

30-day change

0.00 pp

From 1.05% on 19-09-2026

19-09-202619-10-2026
EPSS score
1.05%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse32 products
  • xorg-x11-server&distro=HPE Helion OpenStack 8< 7.6_1.18.3-76.40.1
  • xorg-x11-server&distro=SUSE Enterprise Storage 6< 1.20.3-14.5.16.1
  • xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 1.20.3-14.5.16.1
  • xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 1.20.3-14.5.16.1
  • xorg-x11-server&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 1.19.6-8.30.1
Redhat12 products
  • enterprise_linuxEOL7.0 | 8.0
  • xorg-x11-server< 0:1.20.4-16.el7_9
  • xorg-x11-server-common< 0:1.20.4-16.el7_9
  • xorg-x11-server-debuginfo< 0:1.20.4-16.el7_9
  • xorg-x11-server-devel< 0:1.20.4-16.el7_9
Ubuntu3 products
  • xorg-server< 2:1.18.4-0ubuntu0.12 | < 2:1.19.6-1ubuntu4.9 | < 2:1.20.9-2ubuntu1.2~20.04.2 | < 2:1.15.1-0ubuntu2.11+esm4
  • xorg-server-hwe-16.04< 2:1.19.6-1ubuntu4.1~16.04.6
  • xorg-server-hwe-18.04< 2:1.20.8-2ubuntu2.2~18.04.5
Debian2 products
  • xorg-server< 2:1.20.11-1 | < 2:1.20.4-1+deb10u3 | < 2:1.19.2-1+deb9u8
  • debian_linuxEOL9.0 | 10.0
Mageia2 products
  • x11-server< 1.20.11-1.mga7
  • x11-server< 1.20.11-1.mga8
Opensuse2 products
  • xorg-x11-server&distro=openSUSE Leap 15.2< 1.20.3-lp152.8.21.1
  • xwayland&distro=openSUSE Tumbleweed< 21.1.2-2.1
Alpine1 product
  • xorg-server< 1.20.5-r3 | < 1.20.6-r3 | < 1.20.10-r1
Fedoraproject1 product
X.org1 product

9 vendors · 56 products

References

39 links
Show all 39 references