A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade tigervnc-serverUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade tigervncUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-minimalUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade tigervnc-server-module | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervncUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade tigervnc-licenseUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-applet | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervnc-licenseUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervncUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-server-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-minimal-debuginfo | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xephyrUpgrade xorg-serverUpgrade xorg-nextserverUpgrade xwaylandUpgrade xorg-vfbserver | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xorg-server.Upgrade x11-base/xwayland. | Aug 17, 2026 | Aug 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for xorg_advisory4 | Oct 14, 2025 | Oct 13, 2025 |
| Oracle_linux | — | Upgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XdmxUpgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade xorg-x11-server-Xwayland-develUpgrade tigervncUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-commonUpgrade tigervnc-iconsUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XvfbUpgrade tigervnc-licenseUpgrade xorg-x11-server-source | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfoNo solution existsUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-icons | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervncUpgrade xorg-x11-server-Xvfb-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xorg-x11-serverUpgrade xorg-x11-server-waylandUpgrade xwaylandUpgrade xwayland-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-extra | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xwaylandUpgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro) | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub