A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XvfbUpgrade tigervnc-selinuxUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade tigervnc-licenseUpgrade tigervncUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-serverUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-source | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-server-appletUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade xorg-x11-server-sourceUpgrade tigervncUpgrade tigervnc-debuginfoUpgrade tigervnc-server-module | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-develUpgrade tigervncUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-develUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade xorg-x11-server-debugsource | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-vfbserverUpgrade xwaylandUpgrade xephyrUpgrade xorg-nextserverUpgrade xorg-server | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory4 | Oct 14, 2025 | Oct 13, 2025 |
| Oracle_linux | — | Upgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade tigervnc-selinuxUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XdmxUpgrade tigervnc-serverUpgrade tigervncUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-icons | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xvfb-debuginfoNo solution existsUpgrade xorg-x11-server-sourceUpgrade tigervncUpgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-debugsource | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimalUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-serverUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-develUpgrade tigervncUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-common | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-server-waylandUpgrade xwaylandUpgrade xorg-x11-serverUpgrade xorg-x11-server-sdkUpgrade xwayland-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xvfb | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland | Jun 18, 2025 | Jun 17, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub