PT-2021-8110 · Xwayland+9 · Xwayland+9

Published 2021-07-30 · Updated 2024-02-27 · CVE-2021-3782

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Wayland (affected versions not specified)

Description The issue is related to an integer overflow in the reference count of the buffer pool. This can occur when a large number of wl shm buffer objects are created or when the server is coerced into creating a large number of external references to the buffer storage. As a result, a use-after-free can be constructed on the wl shm pool tracking structure, allowing values to be incremented or decremented. Additionally, it may be possible to construct a limited oracle to leak 4 bytes of server-side memory to the attacking client at a time.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALSA-2023:2786

ALT-PU-2022-2161

ALT-PU-2022-3316

AZL-11019

BDU:2024-07302

CESA-2023_2786

CVE-2021-3782

MGASA-2022-0418

OESA-2022-1920

RHSA-2023:2786

RHSA-2023_2786

SUSE-SU-2023:1860-1

SUSE-SU-2023:1864-1

SUSE-SU-2023:1873-1

SUSE-SU-2023:1874-1

SUSE-SU-2023_1860-1

SUSE-SU-2023_1864-1

SUSE-SU-2023_1873-1

SUSE-SU-2023_1874-1

USN-5614-1

USN-5614-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Red Hat

Suse

Ubuntu

Xwayland

References · 39

• 🔥 https://gitlab.freedesktop.org/wayland/wayland/-/issues/224 · Exploit
• https://osv.dev/vulnerability/USN-5614-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3782 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-1110SE17 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2786.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3782 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:1874-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5614-2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07302 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3782 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0418.html · Security Note
• https://errata.almalinux.org/8/ALSA-2023-2786.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3782 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-3782 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5614-1 · Vendor Advisory