A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervncUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xnest | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-serverUpgrade xorg-nextserverUpgrade xorg-vfbserverUpgrade xephyr | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland | Jul 10, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceNo solution existsUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-devel | Jul 4, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfo | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xwayland-develUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xwaylandUpgrade xorg-x11-server-source | Dec 5, 2025 | Jun 17, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwayland | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub