Read the docs
TI-2025-31243 Aliases CVE-2025-49176GHSA-c5wx-c74v-9c3g

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension

Priority LOW 32CWE-190Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · High · High
Fix status
Partial Red Hat: 26 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00366 30th percentileScored 2026-11-07
Fix Partial xwayland (X.Org): 24.1.7Red Hat: 28 advisoriesRed Hat: 26 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
x.orgxwaylandbefore 24.1.724.1.7Patch availableCNA
Red HatRed Hat Enterprise Linux 10—24.1.5-4.el10_0Patch availableCNA
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION—1.1.0-25.el6_10.1Patch availableCNA
Red HatRed Hat Enterprise Linux 7.7 Advanced Update Support—1.8.0-17.el7_7.1Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—1.20.4-32.el7_9Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—1.8.0-36.el7_9.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8—1.20.11-26.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8—21.1.3-18.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8—1.15.0-7.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—1.9.0-15.el8_2.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—1.20.6-4.el8_2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—1.20.10-2.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—1.11.0-8.el8_4.13Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—1.20.10-2.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—1.11.0-8.el8_4.13Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—1.12.0-6.el8_6.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—21.1.3-2.el8_6.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—1.20.11-5.el8_6.3Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On—1.12.0-6.el8_6.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On—21.1.3-2.el8_6.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service—1.12.0-6.el8_6.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service—21.1.3-2.el8_6.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service—1.20.11-5.el8_6.3Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions—1.12.0-6.el8_6.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions—21.1.3-2.el8_6.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions—1.20.11-5.el8_6.3Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On—1.20.11-16.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On—21.1.3-11.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—1.20.11-16.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—1.12.0-15.el8_8.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—21.1.3-11.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—1.20.11-16.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—1.12.0-15.el8_8.14Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—21.1.3-11.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 9—1.20.11-31.el9_6Patch availableCNA
Red HatRed Hat Enterprise Linux 9—23.2.7-4.el9_6Patch availableCNA
Red HatRed Hat Enterprise Linux 9—1.14.1-8.el9_6Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions—21.1.3-3.el9_0Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions—1.20.11-11.el9_0Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions—1.11.0-22.el9_0.15Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—21.1.3-8.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—1.20.11-18.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—1.12.0-14.el9_2.12Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support—22.1.9-6.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support—1.20.11-26.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support—1.13.1-8.el9_4.7Patch availableCNA
Red HatRed Hat Enterprise Linux 6——No fix listedCNA
  • xwayland Vendorx.org Affected before 24.1.7 Fixed in 24.1.7 Patch available CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 24.1.5-4.el10_0 Patch available CNA
  • Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION VendorRed Hat Affected — Fixed in 1.1.0-25.el6_10.1 Patch available CNA
  • Red Hat Enterprise Linux 7.7 Advanced Update Support VendorRed Hat Affected — Fixed in 1.8.0-17.el7_7.1 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 1.20.4-32.el7_9 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 1.8.0-36.el7_9.2 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.20.11-26.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 21.1.3-18.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 1.15.0-7.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 1.9.0-15.el8_2.14 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 1.20.6-4.el8_2 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.20.10-2.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.11.0-8.el8_4.13 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.20.10-2.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.11.0-8.el8_4.13 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.12.0-6.el8_6.14 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 21.1.3-2.el8_6.4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 1.20.11-5.el8_6.3 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.12.0-6.el8_6.14 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 21.1.3-2.el8_6.4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.12.0-6.el8_6.14 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Telecommunications Update Service VendorRed Hat Affected — Fixed in 21.1.3-2.el8_6.4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.20.11-5.el8_6.3 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.12.0-6.el8_6.14 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 21.1.3-2.el8_6.4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.20.11-5.el8_6.3 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 1.20.11-16.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 21.1.3-11.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.20.11-16.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 1.12.0-15.el8_8.14 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 21.1.3-11.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.20.11-16.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.12.0-15.el8_8.14 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 21.1.3-11.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.20.11-31.el9_6 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 23.2.7-4.el9_6 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 1.14.1-8.el9_6 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 21.1.3-3.el9_0 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.20.11-11.el9_0 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.11.0-22.el9_0.15 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 21.1.3-8.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.20.11-18.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 1.12.0-14.el9_2.12 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 22.1.9-6.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 1.20.11-26.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 1.13.1-8.el9_4.7 Patch available CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE names CNA · 22

CPEVersionsRoleVendor
cpe:/o:redhat:enterprise_linux:10.010.0—Red Hat
cpe:/o:redhat:rhel_els:66—Red Hat
cpe:/o:redhat:rhel_aus:7.7::server7.7—Red Hat
cpe:/o:redhat:rhel_els:77—Red Hat
cpe:/a:redhat:enterprise_linux:8::appstream8—Red Hat
cpe:/a:redhat:enterprise_linux:8::crb8—Red Hat
cpe:/a:redhat:rhel_aus:8.2::appstream8.2—Red Hat
cpe:/a:redhat:rhel_aus:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_aus:8.6::appstream8.6—Red Hat
  • cpe:/o:redhat:enterprise_linux:10.0 Versions 10.0 — ·Red Hat
  • cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat
  • cpe:/o:redhat:rhel_aus:7.7::server Versions 7.7 — ·Red Hat
  • cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::crb Versions 8 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.2::appstream Versions 8.2 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.6::appstream Versions 8.6 — ·Red Hat
Show 12 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:rhel_e4s:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_tus:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_e4s:8.8::appstream8.8—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.8::appstream8.8—Red Hat
cpe:/a:redhat:rhel_tus:8.8::appstream8.8—Red Hat
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
cpe:/a:redhat:enterprise_linux:9::crb9—Red Hat
cpe:/a:redhat:rhel_e4s:9.0::appstream9.0—Red Hat
cpe:/a:redhat:rhel_e4s:9.2::appstream9.2—Red Hat
cpe:/a:redhat:rhel_eus:9.4::appstream9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.4::crb9.4—Red Hat
  • cpe:/a:redhat:rhel_e4s:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::crb Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.0::appstream Versions 9.0 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.4::appstream Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.4::crb Versions 9.4 — ·Red Hat

Remediation

  • Fix · CNA xwayland (X.Org) Fixed in 24.1.7

Red Hat 28 advisories

  • RHSA-2025:10410 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) tigervnc-1.12.0-14.el9_2.12, tigervnc-icons-1.12.0-14.el9_2.12, tigervnc-license-1.12.0-14.el9_2.12 +4
  • RHSA-2025:10381 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) tigervnc-1.11.0-22.el9_0.15, tigervnc-icons-1.11.0-22.el9_0.15, tigervnc-license-1.11.0-22.el9_0.15 +4
  • RHSA-2025:10377 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) tigervnc-1.1.0-25.el6_10.1, tigervnc-server-1.1.0-25.el6_10.1
    • Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) tigervnc-server-applet-1.1.0-25.el6_10.1, tigervnc-server-module-1.1.0-25.el6_10.1
Show 25 more Red Hat advisories
  • RHSA-2025:10375 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) tigervnc-1.8.0-36.el7_9.2, tigervnc-icons-1.8.0-36.el7_9.2, tigervnc-license-1.8.0-36.el7_9.2 +2
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) tigervnc-server-applet-1.8.0-36.el7_9.2, tigervnc-server-module-1.8.0-36.el7_9.2
  • RHSA-2025:10374 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) tigervnc-1.13.1-8.el9_4.7, tigervnc-icons-1.13.1-8.el9_4.7, tigervnc-license-1.13.1-8.el9_4.7 +4
  • RHSA-2025:10378 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) tigervnc-1.9.0-15.el8_2.14, tigervnc-icons-1.9.0-15.el8_2.14, tigervnc-license-1.9.0-15.el8_2.14 +4
  • RHSA-2025:10376 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux Server AUS (v. 7.7) tigervnc-1.8.0-17.el7_7.1, tigervnc-icons-1.8.0-17.el7_7.1, tigervnc-license-1.8.0-17.el7_7.1 +2
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.7) tigervnc-server-applet-1.8.0-17.el7_7.1, tigervnc-server-module-1.8.0-17.el7_7.1
  • RHSA-2025:10370 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) xorg-x11-server-Xwayland-21.1.3-11.el8_8
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.8) xorg-x11-server-Xwayland-21.1.3-11.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) xorg-x11-server-Xwayland-21.1.3-11.el8_8
  • RHSA-2025:10356 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) xorg-x11-server-1.20.11-5.el8_6.3, xorg-x11-server-Xdmx-1.20.11-5.el8_6.3, xorg-x11-server-Xephyr-1.20.11-5.el8_6.3 +4
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) xorg-x11-server-1.20.11-5.el8_6.3, xorg-x11-server-Xdmx-1.20.11-5.el8_6.3, xorg-x11-server-Xephyr-1.20.11-5.el8_6.3 +4
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) xorg-x11-server-1.20.11-5.el8_6.3, xorg-x11-server-Xdmx-1.20.11-5.el8_6.3, xorg-x11-server-Xephyr-1.20.11-5.el8_6.3 +4
  • RHSA-2025:10351 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) xorg-x11-server-devel-1.20.11-26.el9_4, xorg-x11-server-source-1.20.11-26.el9_4
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) xorg-x11-server-1.20.11-26.el9_4, xorg-x11-server-Xdmx-1.20.11-26.el9_4, xorg-x11-server-Xephyr-1.20.11-26.el9_4 +4
  • RHSA-2025:10355 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) tigervnc-1.12.0-15.el8_8.14, tigervnc-icons-1.12.0-15.el8_8.14, tigervnc-license-1.12.0-15.el8_8.14 +4
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) tigervnc-1.12.0-15.el8_8.14, tigervnc-icons-1.12.0-15.el8_8.14, tigervnc-license-1.12.0-15.el8_8.14 +4
  • RHSA-2025:10350 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) xorg-x11-server-1.20.11-18.el9_2, xorg-x11-server-Xdmx-1.20.11-18.el9_2, xorg-x11-server-Xephyr-1.20.11-18.el9_2 +4
  • RHSA-2025:10349 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) tigervnc-1.11.0-8.el8_4.13, tigervnc-icons-1.11.0-8.el8_4.13, tigervnc-license-1.11.0-8.el8_4.13 +4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) tigervnc-1.11.0-8.el8_4.13, tigervnc-icons-1.11.0-8.el8_4.13, tigervnc-license-1.11.0-8.el8_4.13 +4
  • RHSA-2025:10360 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) xorg-x11-server-1.20.4-32.el7_9, xorg-x11-server-Xephyr-1.20.4-32.el7_9, xorg-x11-server-Xorg-1.20.4-32.el7_9 +1
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) xorg-x11-server-Xdmx-1.20.4-32.el7_9, xorg-x11-server-Xnest-1.20.4-32.el7_9, xorg-x11-server-Xvfb-1.20.4-32.el7_9 +4
  • RHSA-2025:10352 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) xorg-x11-server-1.20.11-11.el9_0, xorg-x11-server-Xdmx-1.20.11-11.el9_0, xorg-x11-server-Xephyr-1.20.11-11.el9_0 +4
  • RHSA-2025:10344 Released 2025-07-07 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) tigervnc-1.12.0-6.el8_6.14, tigervnc-icons-1.12.0-6.el8_6.14, tigervnc-license-1.12.0-6.el8_6.14 +4
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) tigervnc-1.12.0-6.el8_6.14, tigervnc-icons-1.12.0-6.el8_6.14, tigervnc-license-1.12.0-6.el8_6.14 +4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) tigervnc-1.12.0-6.el8_6.14, tigervnc-icons-1.12.0-6.el8_6.14, tigervnc-license-1.12.0-6.el8_6.14 +4
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) tigervnc-1.12.0-6.el8_6.14, tigervnc-icons-1.12.0-6.el8_6.14, tigervnc-license-1.12.0-6.el8_6.14 +4
  • RHSA-2025:10346 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) xorg-x11-server-Xwayland-21.1.3-2.el8_6.4
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) xorg-x11-server-Xwayland-21.1.3-2.el8_6.4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) xorg-x11-server-Xwayland-21.1.3-2.el8_6.4
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) xorg-x11-server-Xwayland-21.1.3-2.el8_6.4
  • RHSA-2025:10343 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) xorg-x11-server-1.20.11-16.el8_8, xorg-x11-server-Xdmx-1.20.11-16.el8_8, xorg-x11-server-Xephyr-1.20.11-16.el8_8 +4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.8) xorg-x11-server-1.20.11-16.el8_8, xorg-x11-server-Xdmx-1.20.11-16.el8_8, xorg-x11-server-Xephyr-1.20.11-16.el8_8 +4
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) xorg-x11-server-1.20.11-16.el8_8, xorg-x11-server-Xdmx-1.20.11-16.el8_8, xorg-x11-server-Xephyr-1.20.11-16.el8_8 +4
  • RHSA-2025:10347 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) xorg-x11-server-Xwayland-21.1.3-8.el9_2
  • RHSA-2025:10348 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) xorg-x11-server-Xwayland-21.1.3-3.el9_0
  • RHSA-2025:10342 Released 2025-07-07 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) xorg-x11-server-1.20.10-2.el8_4, xorg-x11-server-Xdmx-1.20.10-2.el8_4, xorg-x11-server-Xephyr-1.20.10-2.el8_4 +5
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) xorg-x11-server-1.20.10-2.el8_4, xorg-x11-server-Xdmx-1.20.10-2.el8_4, xorg-x11-server-Xephyr-1.20.10-2.el8_4 +5
  • RHSA-2025:10258 Released 2025-07-02 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) xorg-x11-server-Xwayland-22.1.9-6.el9_4
  • RHSA-2025:9964 Released 2025-06-30 · Red Hat rating Important
    xorg-x11-server security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) xorg-x11-server-1.20.6-4.el8_2, xorg-x11-server-Xdmx-1.20.6-4.el8_2, xorg-x11-server-Xephyr-1.20.6-4.el8_2 +5
  • RHSA-2025:9392 Released 2025-06-23 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream (v. 8) tigervnc-1.15.0-7.el8_10, tigervnc-icons-1.15.0-7.el8_10, tigervnc-license-1.15.0-7.el8_10 +4
  • RHSA-2025:9303 Released 2025-06-23 · Red Hat rating Important
    xorg-x11-server and xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream (v. 9) xorg-x11-server-1.20.11-31.el9_6, xorg-x11-server-Xdmx-1.20.11-31.el9_6, xorg-x11-server-Xephyr-1.20.11-31.el9_6 +5
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) xorg-x11-server-Xwayland-23.2.7-4.el9_6, xorg-x11-server-Xwayland-devel-23.2.7-4.el9_6, xorg-x11-server-devel-1.20.11-31.el9_6 +1
  • RHSA-2025:9305 Released 2025-06-23 · Red Hat rating Important
    xorg-x11-server and xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream (v. 8) xorg-x11-server-1.20.11-26.el8_10, xorg-x11-server-Xdmx-1.20.11-26.el8_10, xorg-x11-server-Xephyr-1.20.11-26.el8_10 +5
    • Red Hat Enterprise Linux CRB (v. 8) xorg-x11-server-devel-1.20.11-26.el8_10, xorg-x11-server-source-1.20.11-26.el8_10
  • RHSA-2025:9306 Released 2025-06-23 · Red Hat rating Important
    tigervnc security update
    • Red Hat Enterprise Linux AppStream (v. 9) tigervnc-1.14.1-8.el9_6, tigervnc-icons-1.14.1-8.el9_6, tigervnc-license-1.14.1-8.el9_6 +4
  • RHSA-2025:9304 Released 2025-06-23 · Red Hat rating Important
    xorg-x11-server-Xwayland security update
    • Red Hat Enterprise Linux AppStream (v. 10) xorg-x11-server-Xwayland-24.1.5-4.el10_0
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) xorg-x11-server-Xwayland-devel-24.1.5-4.el10_0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10258

    6 records Highest priority Priority LOW 6 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31244 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmodePriority LOW 28
    Show all 6 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9303

    6 records Highest priority Priority LOW 6 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31244 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmodePriority LOW 28
    Show all 6 records → Advisory →
Show 26 more groups
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9304

    6 records Highest priority Priority LOW 6 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31244 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmodePriority LOW 28
    Show all 6 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10342

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10343

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10344

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10346

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10347

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10348

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10349

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10350

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10351

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10352

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10355

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10356

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10360

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10370

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10374

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10375

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10376

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10377

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10378

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10381

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:10410

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9305

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9306

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9392

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 19 more products — RHSA-2025:9964

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2025-31247 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionPriority LOW 34
    • TI-2025-31246 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionPriority LOW 32
    • TI-2025-31242 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsPriority LOW 27
    Show all 5 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat CodeReady Linux Builder EUS (v.9.4)Fixed RHSA-2025:10351
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2025:9304
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:9305, RHSA-2025:9392
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:9303, RHSA-2025:9306
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2025:10378, RHSA-2025:9964
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2025:10342, RHSA-2025:10349
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2025:10344, RHSA-2025:10346, RHSA-2025:10356
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2025:10344, RHSA-2025:10346, RHSA-2025:10356
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2025:10343, RHSA-2025:10355, RHSA-2025:10370
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:10348, RHSA-2025:10352, RHSA-2025:10381
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2025:10347, RHSA-2025:10350, RHSA-2025:10410
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:10258, RHSA-2025:10351, RHSA-2025:10374
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2025:10342, RHSA-2025:10349
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2025:10344, RHSA-2025:10346
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.8)Fixed RHSA-2025:10343, RHSA-2025:10370
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2025:10344, RHSA-2025:10346, RHSA-2025:10356
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2025:10343, RHSA-2025:10355, RHSA-2025:10370
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2025:9305
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2025:9304
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2025:9303
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2025:10360, RHSA-2025:10375
Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)Fixed RHSA-2025:10377
Red Hat Enterprise Linux Server AUS (v. 7.7)Fixed RHSA-2025:10376
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2025:10360, RHSA-2025:10375
Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)Fixed RHSA-2025:10377
Red Hat Enterprise Linux Server Optional AUS (v. 7.7)Fixed RHSA-2025:10376

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-49176
  2. 2026-10-03 Alias added: GHSA-c5wx-c74v-9c3g

References

Advisory 28

Other 5

  • TI-2022-25238 In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for… CVSS 3.1HIGH 7.7
  • TI-1999-00519 An X server's access control is disabled (e.g. CVSS 2.0HIGH 10.0
  • TI-2021-11657 LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote… CVSS 3.1CRITICAL 9.8
  • TI-2018-10465 An issue was discovered in libX11 through 1.6.5. CVSS 3.0CRITICAL 9.8
  • TI-2004-00826 Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other… CVSS 2.0HIGH 10.0
  • TI-2016-08240 Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM… CVSS 3.0CRITICAL 9.8
See all 206 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences