CVE-2025-49179

High CVSS: 7.3

A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.

Vendor

Product

CWE

CWE-190

Yayın Tarihi

2025-06-17 15:15:46

Güncelleme

2025-12-11 16:16:24

Source Identifier

secalert@redhat.com

KEV Date Added

Kategoriler

CWE-190 HIGH 2025

Referanslar

https://access.redhat.com/errata/RHSA-2025:10258 https://access.redhat.com/errata/RHSA-2025:10342 https://access.redhat.com/errata/RHSA-2025:10343 https://access.redhat.com/errata/RHSA-2025:10344 https://access.redhat.com/errata/RHSA-2025:10346 https://access.redhat.com/errata/RHSA-2025:10347 https://access.redhat.com/errata/RHSA-2025:10348 https://access.redhat.com/errata/RHSA-2025:10349 https://access.redhat.com/errata/RHSA-2025:10350 https://access.redhat.com/errata/RHSA-2025:10351 https://access.redhat.com/errata/RHSA-2025:10352 https://access.redhat.com/errata/RHSA-2025:10355 https://access.redhat.com/errata/RHSA-2025:10356 https://access.redhat.com/errata/RHSA-2025:10360 https://access.redhat.com/errata/RHSA-2025:10370 https://access.redhat.com/errata/RHSA-2025:10374 https://access.redhat.com/errata/RHSA-2025:10375 https://access.redhat.com/errata/RHSA-2025:10376 https://access.redhat.com/errata/RHSA-2025:10377 https://access.redhat.com/errata/RHSA-2025:10378 https://access.redhat.com/errata/RHSA-2025:10381 https://access.redhat.com/errata/RHSA-2025:10410 https://access.redhat.com/errata/RHSA-2025:9303 https://access.redhat.com/errata/RHSA-2025:9304 https://access.redhat.com/errata/RHSA-2025:9305 https://access.redhat.com/errata/RHSA-2025:9306 https://access.redhat.com/errata/RHSA-2025:9392 https://access.redhat.com/errata/RHSA-2025:9964 https://access.redhat.com/security/cve/CVE-2025-49179 https://bugzilla.redhat.com/show_bug.cgi?id=2369978 https://gitlab.freedesktop.org/xorg/xserver/-/commit/2bde9ca49a8fd9a1e6697d5e7ef837870d66f5d4 https://www.x.org/wiki/Development/Security/ https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html