Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 754
Alerts This Week
Warning Icon 1 754

Ubuntu 14.04 ESM USN-4905-2 Critical: X.Org Server DoS Risk

ubuntu
Calendar Grey June 30, 2021
Dist Ubuntu Esm H88
Ubuntu Security Update USN-4906-3 resolves a critical vulnerability in the xorg-server which has the potential to bring down the server or enable unauthorized code execution.
X.Org X Server could be made to crash or run programs if it received specially crafted input.

Summary

X.Org X Server could be made to crash or run programs if it received

specially crafted input.

Software Description:

- xorg-server: X.Org X11 server

Details:

USN-4905-1 fixed a vulnerability in X.Org. This update provides

the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled

certain lengths of XInput extension ChangeFeedbackControl requests. An

attacker could use this issue to cause the server to crash, resulting in a

denial of service, or possibly execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service critical issue remote code execution Ubuntu xorg-server

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  xserver-xorg-core               2:1.15.1-0ubuntu2.11+esm4

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-4905-2

https://ubuntu.com/security/notices/USN-4905-1

CVE-2021-3472

Severity
critical
Lowest
Low
Medium
High
Critical

June 30, 2021

Topics%20covered

Topics Covered

security advisory denial of service critical issue remote code execution Ubuntu xorg-server

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.