CVE-2021-3472

A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

• CWE-191

• http://www.openwall.com/lists/oss-security/2021/04/13/1Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1944167Issue Tracking, Patch, Third Party Advisory
• https://gitlab.freedesktop.org/xorg/xserver/-/commit/7aaf54a1884f71dc363f0b884e57bcb67407a6cdPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/04/msg00013.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDF7TAJE7NPZPNVOXSD5HBIFLNPUOD2V/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6S5OPXUDYBSRSVWVLFLJ6AFERG4HNY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N63KL3T22HNFT4FJ7VMVF6U5Q4RFJIQF/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEXPCLMVU25AUZTUXC4MYBGPKOAIM5TW/
• https://lists.x.org/archives/xorg-announce/2021-April/003080.htmlMailing List, Patch, Vendor Advisory
• https://lists.x.org/archives/xorg-announce/2021-April/003080.htmlMailing List, Patch, Vendor Advisory
• https://lists.x.org/archives/xorg-announce/2021-April/003080.htmlMailing List, Patch, Vendor Advisory
• https://lists.x.org/archives/xorg-announce/2021-April/003080.htmlMailing List, Patch, Vendor Advisory
• https://seclists.org/oss-sec/2021/q2/20Mailing List, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202104-02Third Party Advisory
• https://www.debian.org/security/2021/dsa-4893Third Party Advisory
• https://www.tenable.com/plugins/nessus/148701Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-463/Third Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2021/04/13/1Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1944167Issue Tracking, Patch, Third Party Advisory
• https://gitlab.freedesktop.org/xorg/xserver/-/commit/7aaf54a1884f71dc363f0b884e57bcb67407a6cdPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/04/msg00013.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDF7TAJE7NPZPNVOXSD5HBIFLNPUOD2V/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6S5OPXUDYBSRSVWVLFLJ6AFERG4HNY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N63KL3T22HNFT4FJ7VMVF6U5Q4RFJIQF/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEXPCLMVU25AUZTUXC4MYBGPKOAIM5TW/
• https://lists.x.org/archives/xorg-announce/2021-April/003080.htmlMailing List, Patch, Vendor Advisory
• https://lists.x.org/archives/xorg-announce/2021-April/003080.htmlMailing List, Patch, Vendor Advisory
• https://lists.x.org/archives/xorg-announce/2021-April/003080.htmlMailing List, Patch, Vendor Advisory
• https://lists.x.org/archives/xorg-announce/2021-April/003080.htmlMailing List, Patch, Vendor Advisory
• https://seclists.org/oss-sec/2021/q2/20Mailing List, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202104-02Third Party Advisory
• https://www.debian.org/security/2021/dsa-4893Third Party Advisory
• https://www.tenable.com/plugins/nessus/148701Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-463/Third Party Advisory, VDB Entry

Published

Apr 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34713A vulnerability in the Layer 2 punt code of Cisco IOS XR Sof…7.4
• CVE-2021-34714A vulnerability in the Unidirectional Link Detection (UDLD) …7.4
• CVE-2021-34715A vulnerability in the image verification function of Cisco …7.2
• CVE-2021-34716A vulnerability in the web-based management interface of Cis…7.2
• CVE-2021-34718A vulnerability in the SSH Server process of Cisco IOS XR So…8.1
• CVE-2021-34719Multiple vulnerabilities in the CLI of Cisco IOS XR Software…7.8
• CVE-2021-34720A vulnerability in the IP Service Level Agreements (IP SLA) …8.6
• CVE-2021-34721Multiple vulnerabilities in the CLI of Cisco IOS XR Software…6.7
• CVE-2021-34722Multiple vulnerabilities in the CLI of Cisco IOS XR Software…6.7
• CVE-2021-34723A vulnerability in a specific CLI command that is run on Cis…6.7
• CVE-2021-34724A vulnerability in the Cisco IOS XE SD-WAN Software CLI coul…6
• CVE-2021-34725A vulnerability in the CLI of Cisco IOS XE SD-WAN Software c…6.7