A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-develUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-server-appletUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade xorg-x11-server-commonUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-source | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervncUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-moduleUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-iconsUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimal | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xorg-nextserverUpgrade xorg-serverUpgrade xephyrUpgrade xwayland | Jul 2, 2025 | Jul 1, 2025 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory4 | Oct 14, 2025 | Oct 13, 2025 |
| Oracle_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade tigervnc-serverUpgrade tigervncUpgrade tigervnc-selinuxUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-appletUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervncNo solution existsUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade tigervnc-server-appletUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-moduleUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-common | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xwayland-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sdkUpgrade xwaylandUpgrade xorg-x11-server-source | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub