A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-xorg-serveralpine-linux-upgrade-xwayland | Aug 8, 2025 | Jun 17, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-tigervncamazon-linux-2023-upgrade-tigervnc-debuginfoamazon-linux-2023-upgrade-tigervnc-debugsourceamazon-linux-2023-upgrade-tigervnc-iconsamazon-linux-2023-upgrade-tigervnc-licenseamazon-linux-2023-upgrade-tigervnc-selinuxamazon-linux-2023-upgrade-tigervnc-serveramazon-linux-2023-upgrade-tigervnc-server-debuginfoamazon-linux-2023-upgrade-tigervnc-server-minimalamazon-linux-2023-upgrade-tigervnc-server-minimal-debuginfoamazon-linux-2023-upgrade-tigervnc-server-moduleamazon-linux-2023-upgrade-tigervnc-server-module-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-commonamazon-linux-2023-upgrade-xorg-x11-server-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-debugsourceamazon-linux-2023-upgrade-xorg-x11-server-develamazon-linux-2023-upgrade-xorg-x11-server-sourceamazon-linux-2023-upgrade-xorg-x11-server-xephyramazon-linux-2023-upgrade-xorg-x11-server-xephyr-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-xnestamazon-linux-2023-upgrade-xorg-x11-server-xnest-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-xorgamazon-linux-2023-upgrade-xorg-x11-server-xorg-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-xvfbamazon-linux-2023-upgrade-xorg-x11-server-xvfb-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-xwaylandamazon-linux-2023-upgrade-xorg-x11-server-xwayland-debuginfoamazon-linux-2023-upgrade-xorg-x11-server-xwayland-debugsourceamazon-linux-2023-upgrade-xorg-x11-server-xwayland-devel | Jul 11, 2025 | Jun 17, 2025 | |
| Debian | debian-upgrade-xorg-server | Jun 20, 2025 | Jun 17, 2025 | |
| Freebsd | freebsd-upgrade-package-xorg-serverfreebsd-upgrade-package-xephyrfreebsd-upgrade-package-xorg-vfbserverfreebsd-upgrade-package-xorg-nextserverfreebsd-upgrade-package-xwayland | Jul 2, 2025 | Jul 1, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-xorg-x11-server-xwaylandoracle-linux-upgrade-xorg-x11-server-xwayland-devel | Jul 10, 2025 | Jun 17, 2025 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-xorg-x11-server-commonredhat-upgrade-xorg-x11-server-debuginforedhat-upgrade-xorg-x11-server-debugsourceredhat-upgrade-xorg-x11-server-develredhat-upgrade-xorg-x11-server-sourceredhat-upgrade-xorg-x11-server-xdmxredhat-upgrade-xorg-x11-server-xdmx-debuginforedhat-upgrade-xorg-x11-server-xephyrredhat-upgrade-xorg-x11-server-xephyr-debuginforedhat-upgrade-xorg-x11-server-xnestredhat-upgrade-xorg-x11-server-xnest-debuginforedhat-upgrade-xorg-x11-server-xorgredhat-upgrade-xorg-x11-server-xorg-debuginforedhat-upgrade-xorg-x11-server-xvfbredhat-upgrade-xorg-x11-server-xvfb-debuginforedhat-upgrade-xorg-x11-server-xwaylandredhat-upgrade-xorg-x11-server-xwayland-debuginforedhat-upgrade-xorg-x11-server-xwayland-debugsourceredhat-upgrade-xorg-x11-server-xwayland-devel | Jul 4, 2025 | Jun 17, 2025 | |
| Rocky_linux | rocky-upgrade-xorg-x11-server-xwaylandrocky-upgrade-xorg-x11-server-xwayland-debuginforocky-upgrade-xorg-x11-server-xwayland-debugsourcerocky-upgrade-xorg-x11-server-xwayland-devel | Oct 6, 2025 | Oct 3, 2025 | |
| Suse | — | suse-upgrade-xorg-x11-serversuse-upgrade-xorg-x11-server-extrasuse-upgrade-xorg-x11-server-sdksuse-upgrade-xorg-x11-server-sourcesuse-upgrade-xorg-x11-server-xvfbsuse-upgrade-xwaylandsuse-upgrade-xwayland-devel | Dec 5, 2025 | Jun 17, 2025 |
| Ubuntu | ubuntu-upgrade-xserver-xorg-coreubuntu-upgrade-xwayland | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub