vulnerability
Ubuntu: (Multiple Advisories) (CVE-2025-49176): X.Org X Server vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:L/AC:L/Au:S/C:P/I:C/A:C) | Jun 17, 2025 | Jun 18, 2025 | Apr 16, 2026 |
Severity
6
CVSS
(AV:L/AC:L/Au:S/C:P/I:C/A:C)
Published
Jun 17, 2025
Added
Jun 18, 2025
Modified
Apr 16, 2026
Description
A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.
Solutions
ubuntu-pro-upgrade-xserver-xorg-coreubuntu-pro-upgrade-xserver-xorg-core-hwe-16-04ubuntu-pro-upgrade-xserver-xorg-core-hwe-18-04ubuntu-pro-upgrade-xwaylandubuntu-pro-upgrade-xwayland-hwe-16-04ubuntu-pro-upgrade-xwayland-hwe-18-04ubuntu-upgrade-xserver-xorg-coreubuntu-upgrade-xwayland
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.