p PatchFirst

CVE-2025-49177

CVE-2025-49177 · Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.

CVSS 6.1 · Medium · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • xwayland

    Versions
    • ≥ 0, < 24.1.7: Affected (semver)

    Update to 24.1.7

  • red hat enterprise linux 10

    Versions
    • ≥ 0:24.1.5-4.el10_0: Not affected (rpm)

    No fix published

  • red hat enterprise linux 9

    Versions
    • ≥ 0:1.20.11-31.el9_6: Not affected (rpm)

    No fix published

  • red hat enterprise linux 9

    Versions
    • ≥ 0:23.2.7-4.el9_6: Not affected (rpm)

    No fix published

  • red hat enterprise linux 9.4 extended update support

    Versions
    • ≥ 0:22.1.9-6.el9_4: Not affected (rpm)

    No fix published

  • red hat enterprise linux 6

    No fix published

  • red hat enterprise linux 7

    No fix published

  • red hat enterprise linux 8

    No fix published

  • red hat enterprise linux 9

    No fix published

  • xorg-server Debian:12

    Versions
    • 2:21.1.7-3
    • 2:21.1.7-3+deb12u1
    • 2:21.1.7-3+deb12u2
    • 2:21.1.7-3+deb12u3
    • 2:21.1.7-3+deb12u4
    • 2:21.1.7-3+deb12u5
    • 2:21.1.7-3+deb12u6
    • 2:21.1.7-3+deb12u7
    • 2:21.1.7-3+deb12u8
    • 2:21.1.7-3+deb12u9
    Affected ranges
    • ECOSYSTEM: < 2:21.1.7-3+deb12u10

    Update to 2:21.1.7-3+deb12u10

  • xorg-server Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:21.1.16-1.2

    Update to 2:21.1.16-1.2

  • xorg-server Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:21.1.16-1.2

    Update to 2:21.1.16-1.2

  • xwayland Debian:12

    Versions
    • 2:22.1.9-1
    • 2:23.1.0-1
    • 2:23.1.1-1
    • 2:23.2.0-1
    • 2:23.2.1-1
    • 2:23.2.2-1
    • 2:23.2.3-1
    • 2:23.2.4-1
    • 2:23.2.6-1
    • 2:24.0.99.901-1
    • 2:24.1.0-1
    • 2:24.1.10-1
    • 2:24.1.11-1
    • 2:24.1.12-1
    • 2:24.1.13-1
    • 2:24.1.2-1
    • 2:24.1.3-1
    • 2:24.1.4-1
    • 2:24.1.4-2
    • 2:24.1.4-3
    • 2:24.1.5-1
    • 2:24.1.6-1
    • 2:24.1.8-1
    • 2:24.1.9-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xwayland Debian:13

    Versions
    • 2:24.1.10-1
    • 2:24.1.11-1
    • 2:24.1.12-1
    • 2:24.1.13-1
    • 2:24.1.6-1
    • 2:24.1.8-1
    • 2:24.1.9-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xwayland Debian:14

    Versions
    • 2:24.1.6-1
    Affected ranges
    • ECOSYSTEM: < 2:24.1.8-1

    Update to 2:24.1.8-1

  • xorg-server Ubuntu:Pro:14.04:LTS

    Versions
    • 2:1.14.3-3ubuntu2
    • 2:1.14.3-3ubuntu3
    • 2:1.14.3-3ubuntu4
    • 2:1.14.3-5ubuntu1
    • 2:1.14.4-1ubuntu1
    • 2:1.14.4-1ubuntu2
    • 2:1.14.4.901-0ubuntu2
    • 2:1.14.5-1ubuntu2
    • 2:1.14.5-1ubuntu4
    • 2:1.15.0-1ubuntu1
    • 2:1.15.0-1ubuntu2
    • 2:1.15.0-1ubuntu3
    • 2:1.15.0-1ubuntu4
    • 2:1.15.0-1ubuntu6
    • 2:1.15.0-1ubuntu7
    • 2:1.15.1-0ubuntu1
    • 2:1.15.1-0ubuntu2
    • 2:1.15.1-0ubuntu2.1
    • 2:1.15.1-0ubuntu2.4
    • 2:1.15.1-0ubuntu2.5
    • 2:1.15.1-0ubuntu2.6
    • 2:1.15.1-0ubuntu2.7
    • 2:1.15.1-0ubuntu2.9
    • 2:1.15.1-0ubuntu2.10
    • 2:1.15.1-0ubuntu2.11
    • 2:1.15.1-0ubuntu2.11+esm2
    • 2:1.15.1-0ubuntu2.11+esm3
    • 2:1.15.1-0ubuntu2.11+esm4
    • 2:1.15.1-0ubuntu2.11+esm5
    • 2:1.15.1-0ubuntu2.11+esm6
    • 2:1.15.1-0ubuntu2.11+esm7
    • 2:1.15.1-0ubuntu2.11+esm8
    • 2:1.15.1-0ubuntu2.11+esm9
    • 2:1.15.1-0ubuntu2.11+esm11
    • 2:1.15.1-0ubuntu2.11+esm12
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xorg-server Ubuntu:Pro:16.04:LTS

    Versions
    • 2:1.17.2-1ubuntu9
    • 2:1.17.2-1ubuntu10
    • 2:1.17.3-2ubuntu1
    • 2:1.17.3-2ubuntu2
    • 2:1.17.3-2ubuntu3
    • 2:1.17.3-2ubuntu4
    • 2:1.18.1-1ubuntu3
    • 2:1.18.1-1ubuntu4
    • 2:1.18.3-1ubuntu1
    • 2:1.18.3-1ubuntu2
    • 2:1.18.3-1ubuntu2.2
    • 2:1.18.3-1ubuntu2.3
    • 2:1.18.4-0ubuntu0.1
    • 2:1.18.4-0ubuntu0.2
    • 2:1.18.4-0ubuntu0.3
    • 2:1.18.4-0ubuntu0.4
    • 2:1.18.4-0ubuntu0.6
    • 2:1.18.4-0ubuntu0.7
    • 2:1.18.4-0ubuntu0.8
    • 2:1.18.4-0ubuntu0.9
    • 2:1.18.4-0ubuntu0.10
    • 2:1.18.4-0ubuntu0.11
    • 2:1.18.4-0ubuntu0.12
    • 2:1.18.4-0ubuntu0.12+esm1
    • 2:1.18.4-0ubuntu0.12+esm2
    • 2:1.18.4-0ubuntu0.12+esm4
    • 2:1.18.4-0ubuntu0.12+esm5
    • 2:1.18.4-0ubuntu0.12+esm6
    • 2:1.18.4-0ubuntu0.12+esm8
    • 2:1.18.4-0ubuntu0.12+esm9
    • 2:1.18.4-0ubuntu0.12+esm10
    • 2:1.18.4-0ubuntu0.12+esm12
    • 2:1.18.4-0ubuntu0.12+esm13
    • 2:1.18.4-0ubuntu0.12+esm14
    • 2:1.18.4-0ubuntu0.12+esm15
    • 2:1.18.4-0ubuntu0.12+esm16
    • 2:1.18.4-0ubuntu0.12+esm17
    • 2:1.18.4-0ubuntu0.12+esm18
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xorg-server-hwe-16.04 Ubuntu:Pro:16.04:LTS

    Versions
    • 2:1.18.4-1ubuntu6.1~16.04.1
    • 2:1.18.4-1ubuntu6.1~16.04.2
    • 2:1.19.3-1ubuntu1~16.04.2
    • 2:1.19.3-1ubuntu1~16.04.3
    • 2:1.19.3-1ubuntu1~16.04.4
    • 2:1.19.5-0ubuntu2~16.04.1
    • 2:1.19.6-1ubuntu4~16.04.1
    • 2:1.19.6-1ubuntu4.1~16.04.1
    • 2:1.19.6-1ubuntu4.1~16.04.2
    • 2:1.19.6-1ubuntu4.1~16.04.3
    • 2:1.19.6-1ubuntu4.1~16.04.4
    • 2:1.19.6-1ubuntu4.1~16.04.5
    • 2:1.19.6-1ubuntu4.1~16.04.6
    • 2:1.19.6-1ubuntu4.1~16.04.6+esm1
    • 2:1.19.6-1ubuntu4.1~16.04.6+esm3
    • 2:1.19.6-1ubuntu4.1~16.04.6+esm4
    • 2:1.19.6-1ubuntu4.1~16.04.6+esm5
    • 2:1.19.6-1ubuntu4.1~16.04.6+esm6
    • 2:1.19.6-1ubuntu4.1~16.04.6+esm7
    • 2:1.19.6-1ubuntu4.1~16.04.6+esm8
    • 2:1.19.6-1ubuntu4.1~16.04.6+esm9
    • 2:1.19.6-1ubuntu4.1~16.04.6+esm10
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xorg-server Ubuntu:Pro:18.04:LTS

    Versions
    • 2:1.19.5-0ubuntu2
    • 2:1.19.6-1ubuntu1
    • 2:1.19.6-1ubuntu2
    • 2:1.19.6-1ubuntu3
    • 2:1.19.6-1ubuntu4
    • 2:1.19.6-1ubuntu4.1
    • 2:1.19.6-1ubuntu4.2
    • 2:1.19.6-1ubuntu4.3
    • 2:1.19.6-1ubuntu4.4
    • 2:1.19.6-1ubuntu4.5
    • 2:1.19.6-1ubuntu4.6
    • 2:1.19.6-1ubuntu4.7
    • 2:1.19.6-1ubuntu4.8
    • 2:1.19.6-1ubuntu4.9
    • 2:1.19.6-1ubuntu4.10
    • 2:1.19.6-1ubuntu4.11
    • 2:1.19.6-1ubuntu4.12
    • 2:1.19.6-1ubuntu4.13
    • 2:1.19.6-1ubuntu4.14
    • 2:1.19.6-1ubuntu4.15
    • 2:1.19.6-1ubuntu4.15+esm1
    • 2:1.19.6-1ubuntu4.15+esm3
    • 2:1.19.6-1ubuntu4.15+esm4
    • 2:1.19.6-1ubuntu4.15+esm5
    • 2:1.19.6-1ubuntu4.15+esm7
    • 2:1.19.6-1ubuntu4.15+esm8
    • 2:1.19.6-1ubuntu4.15+esm9
    • 2:1.19.6-1ubuntu4.15+esm10
    • 2:1.19.6-1ubuntu4.15+esm11
    • 2:1.19.6-1ubuntu4.15+esm12
    • 2:1.19.6-1ubuntu4.15+esm13
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xorg-server-hwe-18.04 Ubuntu:Pro:18.04:LTS

    Versions
    • 2:1.20.1-3ubuntu2.1~18.04.1
    • 2:1.20.4-1ubuntu3~18.04.1
    • 2:1.20.5+git20191008-0ubuntu1~18.04.1
    • 2:1.20.8-2ubuntu2.1~18.04.1
    • 2:1.20.8-2ubuntu2.2~18.04.1
    • 2:1.20.8-2ubuntu2.2~18.04.2
    • 2:1.20.8-2ubuntu2.2~18.04.3
    • 2:1.20.8-2ubuntu2.2~18.04.4
    • 2:1.20.8-2ubuntu2.2~18.04.5
    • 2:1.20.8-2ubuntu2.2~18.04.6
    • 2:1.20.8-2ubuntu2.2~18.04.7
    • 2:1.20.8-2ubuntu2.2~18.04.8
    • 2:1.20.8-2ubuntu2.2~18.04.9
    • 2:1.20.8-2ubuntu2.2~18.04.10
    • 2:1.20.8-2ubuntu2.2~18.04.11
    • 2:1.20.8-2ubuntu2.2~18.04.11+esm1
    • 2:1.20.8-2ubuntu2.2~18.04.11+esm2
    • 2:1.20.8-2ubuntu2.2~18.04.11+esm3
    • 2:1.20.8-2ubuntu2.2~18.04.11+esm4
    • 2:1.20.8-2ubuntu2.2~18.04.11+esm5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xorg-server Ubuntu:Pro:20.04:LTS

    Versions
    • 2:1.20.5+git20191008-0ubuntu1
    • 2:1.20.6-1ubuntu1
    • 2:1.20.7-2ubuntu1
    • 2:1.20.7-2ubuntu2
    • 2:1.20.8-2ubuntu2
    • 2:1.20.8-2ubuntu2.1
    • 2:1.20.8-2ubuntu2.2
    • 2:1.20.8-2ubuntu2.3
    • 2:1.20.8-2ubuntu2.4
    • 2:1.20.8-2ubuntu2.6
    • 2:1.20.9-2ubuntu1.1~20.04.1
    • 2:1.20.9-2ubuntu1.2~20.04.1
    • 2:1.20.9-2ubuntu1.2~20.04.2
    • 2:1.20.11-1ubuntu1~20.04.2
    • 2:1.20.13-1ubuntu1~20.04.2
    • 2:1.20.13-1ubuntu1~20.04.3
    • 2:1.20.13-1ubuntu1~20.04.4
    • 2:1.20.13-1ubuntu1~20.04.5
    • 2:1.20.13-1ubuntu1~20.04.6
    • 2:1.20.13-1ubuntu1~20.04.8
    • 2:1.20.13-1ubuntu1~20.04.9
    • 2:1.20.13-1ubuntu1~20.04.12
    • 2:1.20.13-1ubuntu1~20.04.14
    • 2:1.20.13-1ubuntu1~20.04.15
    • 2:1.20.13-1ubuntu1~20.04.16
    • 2:1.20.13-1ubuntu1~20.04.17
    • 2:1.20.13-1ubuntu1~20.04.18
    • 2:1.20.13-1ubuntu1~20.04.19
    • 2:1.20.13-1ubuntu1~20.04.20
    • 2:1.20.13-1ubuntu1~20.04.20+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xorg-server Ubuntu:22.04:LTS

    Versions
    • 2:1.20.13-1ubuntu1
    • 2:1.20.13-1ubuntu2
    • 2:1.20.14-1ubuntu1
    • 2:21.1.3-2ubuntu2
    • 2:21.1.3-2ubuntu2.1
    • 2:21.1.3-2ubuntu2.2
    • 2:21.1.3-2ubuntu2.3
    • 2:21.1.3-2ubuntu2.4
    • 2:21.1.3-2ubuntu2.5
    • 2:21.1.3-2ubuntu2.6
    • 2:21.1.3-2ubuntu2.7
    • 2:21.1.3-2ubuntu2.8
    • 2:21.1.3-2ubuntu2.9
    • 2:21.1.4-2ubuntu1.7~22.04.1
    • 2:21.1.4-2ubuntu1.7~22.04.2
    • 2:21.1.4-2ubuntu1.7~22.04.5
    • 2:21.1.4-2ubuntu1.7~22.04.7
    • 2:21.1.4-2ubuntu1.7~22.04.8
    • 2:21.1.4-2ubuntu1.7~22.04.9
    • 2:21.1.4-2ubuntu1.7~22.04.10
    • 2:21.1.4-2ubuntu1.7~22.04.11
    • 2:21.1.4-2ubuntu1.7~22.04.12
    • 2:21.1.4-2ubuntu1.7~22.04.13
    • 2:21.1.4-2ubuntu1.7~22.04.14
    Affected ranges
    • ECOSYSTEM: < 2:21.1.4-2ubuntu1.7~22.04.15

    Update to 2:21.1.4-2ubuntu1.7~22.04.15

  • xwayland Ubuntu:22.04:LTS

    Versions
    • 2:21.1.2-0ubuntu1
    • 2:21.1.3-1
    • 2:21.1.3-1ubuntu1
    • 2:21.1.4-1
    • 2:22.1.0-1
    • 2:22.1.1-1
    • 2:22.1.1-1ubuntu0.1
    • 2:22.1.1-1ubuntu0.2
    • 2:22.1.1-1ubuntu0.3
    • 2:22.1.1-1ubuntu0.4
    • 2:22.1.1-1ubuntu0.5
    • 2:22.1.1-1ubuntu0.6
    • 2:22.1.1-1ubuntu0.7
    • 2:22.1.1-1ubuntu0.9
    • 2:22.1.1-1ubuntu0.10
    • 2:22.1.1-1ubuntu0.11
    • 2:22.1.1-1ubuntu0.12
    • 2:22.1.1-1ubuntu0.13
    • 2:22.1.1-1ubuntu0.14
    • 2:22.1.1-1ubuntu0.15
    • 2:22.1.1-1ubuntu0.17
    • 2:22.1.1-1ubuntu0.18
    Affected ranges
    • ECOSYSTEM: < 2:22.1.1-1ubuntu0.19

    Update to 2:22.1.1-1ubuntu0.19

  • xorg-server Ubuntu:24.04:LTS

    Versions
    • 2:21.1.7-3ubuntu2
    • 2:21.1.7-3ubuntu2.1
    • 2:21.1.10-1ubuntu1
    • 2:21.1.11-2ubuntu1
    • 2:21.1.12-1ubuntu1
    • 2:21.1.12-1ubuntu1.1
    • 2:21.1.12-1ubuntu1.2
    • 2:21.1.12-1ubuntu1.3
    Affected ranges
    • ECOSYSTEM: < 2:21.1.12-1ubuntu1.4

    Update to 2:21.1.12-1ubuntu1.4

Original sources

Check your server →