A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-develUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade tigervnc-server-minimalUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-debugsource | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-serverUpgrade xwaylandUpgrade xorg-vfbserverUpgrade xorg-nextserverUpgrade xephyr | Jul 2, 2025 | Jul 1, 2025 |
| Oracle_linux | — | Upgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland | Jul 10, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandNo solution existsUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-devel | Jul 4, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfo | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xwayland-develUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xwayland | Dec 5, 2025 | Jun 17, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwayland | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub