A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 8, 2025 | Jun 17, 2025 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-debugsourceUpgrade tigervnc-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-licenseUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade tigervnc-debugsourceUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xwayland-devel | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-serverUpgrade xorg-vfbserverUpgrade xorg-nextserverUpgrade xephyr | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland | Jul 10, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xvfb-debuginfoNo solution existsUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xorg-debuginfo | Jul 4, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-debugsource | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xwayland-develUpgrade xorg-x11-server-extraUpgrade xwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-source | Dec 5, 2025 | Jun 17, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwayland | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub