A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-iconsUpgrade xorg-x11-server-sourceUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimal | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade xorg-x11-server-XnestUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-appletUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-XvfbUpgrade tigervnc-selinuxUpgrade tigervnc-serverUpgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XnestUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xorg | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-serverUpgrade xorg-vfbserverUpgrade xorg-nextserverUpgrade xephyrUpgrade xwayland | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory4 | Oct 14, 2025 | Oct 13, 2025 |
| Oracle_linux | — | Upgrade tigervncUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XdmxUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-appletUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xorg | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade tigervnc-server-appletUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-develUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-commonUpgrade tigervnc-debugsourceUpgrade tigervnc-debuginfoUpgrade tigervnc-server-debuginfoNo solution existsUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-module | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-moduleUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-devel | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xwaylandUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-waylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-XvfbUpgrade xwayland-devel | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xwaylandUpgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro) | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub