Name: CVE-2025-49177: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2025-06-17T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2025-49177, CWE-200, CVSS 6.1, EPSS 0.00361

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.

CVSS Details

CVSS 3.1 Base Score: 6.1
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade xorg-serverUpgrade xwayland	Aug 8, 2025	Jun 17, 2025
Amazon_linux_2023	—	Upgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XorgUpgrade tigervnc-iconsUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfo	Jul 11, 2025	Jun 17, 2025
Debian	—	Upgrade xorg-server	Jun 20, 2025	Jun 17, 2025
Freebsd	—	Upgrade xorg-serverUpgrade xwaylandUpgrade xorg-nextserverUpgrade xorg-vfbserverUpgrade xephyr	Jul 2, 2025	Jul 1, 2025
Gentoo Linux	—	Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server.	Aug 17, 2026	Aug 17, 2026
Oracle_linux	—	Upgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland	Jul 10, 2025	Jun 17, 2025
Redhat_linux	—	Upgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrNo solution existsUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfo	Jul 4, 2025	Jun 17, 2025
Rocky_linux	—	Upgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-debugsource	Oct 6, 2025	Oct 3, 2025
Suse	—	Upgrade xwaylandUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sdkUpgrade xwayland-develUpgrade xorg-x11-server-extraUpgrade xorg-x11-server	Dec 5, 2025	Jun 17, 2025
Ubuntu	—	Upgrade xwaylandUpgrade xserver-xorg-core	Jun 18, 2025	Jun 17, 2025

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence