A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 8, 2025 | Jun 17, 2025 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-develUpgrade tigervnc-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-selinuxUpgrade tigervncUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfo | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xephyrUpgrade xorg-nextserverUpgrade xorg-serverUpgrade xwayland | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-devel | Jul 10, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-sourceNo solution existsUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfo | Jul 4, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfo | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade xwayland-develUpgrade xorg-x11-serverUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-XvfbUpgrade xwaylandUpgrade xorg-x11-server-source | Dec 5, 2025 | Jun 17, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade xwayland | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub