Out-of-Bounds Affecting xorg-server-hwe-16.04 package, versions <2:1.19.6-1ubuntu4.1~16.04.6+esm5


Severity

Recommended
medium

Based on Ubuntu security rating.

Threat Intelligence

EPSS
0.05% (21st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1604-XORGSERVERHWE1604-2319923
  • published14 Dec 2021
  • disclosed17 Dec 2021

Introduced: 14 Dec 2021

CVE-2021-4009  (opens in a new tab)
CWE-119  (opens in a new tab)

How to fix?

Upgrade Ubuntu:16.04 xorg-server-hwe-16.04 to version 2:1.19.6-1ubuntu4.1~16.04.6+esm5 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream xorg-server-hwe-16.04 package and not the xorg-server-hwe-16.04 package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcXFixesCreatePointerBarrier function. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

References

CVSS Base Scores

version 3.1