QID 198321

Date Published: 2021-04-21

QID 198321: Ubuntu Security Notification for X.Org X Server vulnerability (USN-4905-1)

The x.Org X Server incorrectly handled certain lengths of XInput extension ChangeFeedbackControl requests

An attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code

  • CVSS V3 rated as Medium - 5.6 severity.
  • CVSS V2 rated as Low - 1.5 severity.
  • Solution
    Refer to Ubuntu advisory: USN-4905-1 for affected packages and patching details, or update with your package manager.
    Vendor References

    CVEs related to QID 198321

    Software Advisories
    Advisory ID Software Component Link
    USN-4905-1 Ubuntu Linux URL Logo usn.ubuntu.com/4905-1