A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-serverUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XnestUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-devel | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-XnestUpgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XephyrUpgrade tigervnc-iconsUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade tigervncUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XdmxUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade xorg-x11-server-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-develUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade tigervnc-serverUpgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade tigervncUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xvfb | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-serverUpgrade xwaylandUpgrade xorg-vfbserverUpgrade xorg-nextserverUpgrade xephyr | Jul 2, 2025 | Jul 1, 2025 |
| Oracle_linux | — | Upgrade tigervncUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XnestUpgrade tigervnc-selinuxUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | No solution existsUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-selinuxUpgrade xorg-x11-server-XdmxUpgrade tigervncUpgrade tigervnc-serverUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-licenseUpgrade tigervnc-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade tigervnc-iconsUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-appletUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-Xwayland-debugsource | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade tigervnc-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-module | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xorg-x11-server-extraUpgrade xorg-x11-serverUpgrade xwaylandUpgrade xorg-x11-server-waylandUpgrade xwayland-develUpgrade xorg-x11-server-sdkUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xvfb | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xwaylandUpgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xwayland-hwe-18.04 (Ubuntu Pro) | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub