A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-develUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-commonUpgrade tigervnc-licenseUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade xorg-x11-server-XnestUpgrade tigervncUpgrade tigervnc-selinuxUpgrade xorg-x11-server-Xwayland-devel | Jul 1, 2025 | Jun 17, 2025 |
| Alpine Linux | — | Upgrade xwaylandUpgrade xorg-server | Aug 8, 2025 | Jun 17, 2025 |
| Amazon Linux Ami 2 | — | Upgrade xorg-x11-server-debuginfoUpgrade tigervncUpgrade xorg-x11-server-develUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-XorgUpgrade tigervnc-iconsUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XephyrUpgrade tigervnc-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade tigervnc-selinuxUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xnest-debuginfoUpgrade tigervnc-debugsourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-develUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-minimal-debuginfo | Jul 11, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade xorg-server | Jun 20, 2025 | Jun 17, 2025 |
| Freebsd | — | Upgrade xorg-nextserverUpgrade xorg-vfbserverUpgrade xorg-serverUpgrade xwaylandUpgrade xephyr | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-moduleUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade tigervnc-licenseUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-source | Jun 30, 2025 | Jun 17, 2025 |
| Redhat_linux | — | Upgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-appletUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade xorg-x11-server-XnestUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-licenseUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-debuginfoNo solution existsUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade tigervnc-serverUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-selinuxUpgrade tigervncUpgrade xorg-x11-server-Xdmx-debuginfo | Jun 26, 2025 | Jun 17, 2025 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-debugsourceUpgrade tigervnc-server-moduleUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-serverUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XephyrUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XnestUpgrade tigervnc | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade xwaylandUpgrade xorg-x11-server-waylandUpgrade xorg-x11-server-extraUpgrade xorg-x11-server-sdkUpgrade xorg-x11-serverUpgrade xwayland-develUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-Xvfb | Dec 5, 2025 | Jul 25, 2025 |
| Ubuntu | — | Upgrade xserver-xorg-core-hwe-16.04 (Ubuntu Pro)Upgrade xserver-xorg-coreUpgrade xwayland-hwe-18.04 (Ubuntu Pro)Upgrade xwayland-hwe-16.04 (Ubuntu Pro)Upgrade xwaylandUpgrade xserver-xorg-core-hwe-18.04 (Ubuntu Pro)Upgrade xwayland (Ubuntu Pro)Upgrade xserver-xorg-core (Ubuntu Pro) | Jun 18, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub