A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade tigervncUpgrade tigervnc-server-minimalUpgrade tigervnc-licenseUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xvfb | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-licenseUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade tigervncUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade tigervnc-iconsUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-server | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade tigervncUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfo | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xwaylandUpgrade xorg-nextserverUpgrade xephyrUpgrade xorg-vfbserverUpgrade xorg-server | Jul 2, 2025 | Jul 1, 2025 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory4 | Oct 14, 2025 | Oct 13, 2025 |
| Oracle_linux | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-iconsUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XorgUpgrade tigervnc-selinuxUpgrade tigervnc-license | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade tigervnc-debugsourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervncUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-minimalNo solution existsUpgrade tigervnc-server-appletUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-develUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-selinuxUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xnest-debuginfo | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-serverUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xdmx | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xwaylandUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xwayland-devel | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro) | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub