Detections
Analytics

CVE-2025-49179

high

Description

A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.

References

https://access.redhat.com/errata/RHSA-2025:9964

https://access.redhat.com/errata/RHSA-2025:9392

https://access.redhat.com/errata/RHSA-2025:9306

https://access.redhat.com/errata/RHSA-2025:9305

https://access.redhat.com/errata/RHSA-2025:9304

https://access.redhat.com/errata/RHSA-2025:9303

https://access.redhat.com/errata/RHSA-2025:10410

https://access.redhat.com/errata/RHSA-2025:10381

https://access.redhat.com/errata/RHSA-2025:10378

https://access.redhat.com/errata/RHSA-2025:10377

https://access.redhat.com/errata/RHSA-2025:10376

https://access.redhat.com/errata/RHSA-2025:10375

https://access.redhat.com/errata/RHSA-2025:10374

https://access.redhat.com/errata/RHSA-2025:10370

https://access.redhat.com/errata/RHSA-2025:10360

https://access.redhat.com/errata/RHSA-2025:10356

https://access.redhat.com/errata/RHSA-2025:10355

https://access.redhat.com/errata/RHSA-2025:10352

https://access.redhat.com/errata/RHSA-2025:10351

https://access.redhat.com/errata/RHSA-2025:10350

https://access.redhat.com/errata/RHSA-2025:10349

https://access.redhat.com/errata/RHSA-2025:10348

https://access.redhat.com/errata/RHSA-2025:10347

https://access.redhat.com/errata/RHSA-2025:10346

https://access.redhat.com/errata/RHSA-2025:10344

https://access.redhat.com/errata/RHSA-2025:10343

https://access.redhat.com/errata/RHSA-2025:10342

https://access.redhat.com/errata/RHSA-2025:10258

https://www.x.org/wiki/Development/Security/

https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html

https://gitlab.freedesktop.org/xorg/xserver/-/commit/2bde9ca49a8fd9a1e6697d5e7ef837870d66f5d4

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18500

https://bugzilla.redhat.com/show_bug.cgi?id=2369978

https://access.redhat.com/security/cve/CVE-2025-49179

Details

Source: Mitre, NVD

Published: 2025-06-17

Updated: 2026-06-30

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7.3

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Severity: High

EPSS

EPSS: 0.00332