A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-serverUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade tigervnc-server-moduleUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade tigervncUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-commonUpgrade tigervnc-iconsUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XnestUpgrade tigervnc-debugsourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade tigervnc-selinuxUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade tigervnc-serverUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-license | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xorg-nextserverUpgrade xephyrUpgrade xorg-serverUpgrade xwayland | Jul 2, 2025 | Jul 1, 2025 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory4 | Oct 14, 2025 | Oct 13, 2025 |
| Oracle_linux | — | Upgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade tigervncUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-applet | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade tigervnc-server-appletUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XnestUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimal-debuginfoNo solution existsUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervncUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-debugsourceUpgrade tigervnc-debuginfo | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-devel | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xorg-x11-server-sdkUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xwaylandUpgrade xwayland-develUpgrade xorg-x11-server-source | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-coreUpgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro) | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub