Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in X.Org X11 und Xwayland ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen und möglicherweise Code auszuführen oder nicht näher spezifizierte Auswirkungen zu erzielen.
Product
Das X Window System dient der Erzeugung grafischer Oberflächen auf Unix Systemen.
Xwayland ist ein X-Server für die Ausführung von X-Clients unter Wayland Display Servern. Wayland ist ein Ersatz für X.11 Display-Server.
Vulnerabilities 6
-
High 7.8
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.
-
High 7.3
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.
-
High 7.3
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension
A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.
-
Medium 6.1
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash.
-
Medium 6.1
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode
A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests.
-
Medium 5.5
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.
Revision history
-
#21
Neue Updates von Oracle Linux aufgenommen
-
#20
Neue Updates von Gentoo aufgenommen
-
#19
Neue Updates von Oracle Linux aufgenommen
-
#18
Neue Updates von Oracle Linux aufgenommen
-
#17
Neue Updates von Oracle Linux aufgenommen
-
#16
Neue Updates von Oracle Linux aufgenommen
-
#15
Neue Updates von Oracle Linux aufgenommen
-
#14
Neue Updates von XEROX aufgenommen
-
#13
Neue Updates von IBM aufgenommen
-
#12
Neue Updates von Oracle Linux aufgenommen
-
#11
Neue Updates von Amazon aufgenommen
-
#10
Neue Updates von Oracle Linux und Red Hat aufgenommen
-
#9
Neue Updates von Red Hat, openSUSE und SUSE aufgenommen
-
#8
Neue Updates von SUSE und Red Hat aufgenommen
-
#7
Neue Updates von SUSE aufgenommen
-
#6
Neue Updates von Red Hat aufgenommen
-
#5
Neue Updates von Oracle Linux und Debian aufgenommen
-
#4
Neue Updates von Red Hat, Oracle Linux und Debian aufgenommen
-
#3
Neue Updates von Red Hat aufgenommen
-
#2
Neue Updates von Fedora und SUSE aufgenommen
-
#1
Initiale Fassung
References
-
X.Org Security Advisory: multiple security issues X.Org X server and Xwayland vom 2025-06-17
https://seclists.org/oss-sec/2025/q2/260
-
SUSE Security Update SUSE-SU-2025:01981-1 vom 2025-06-17
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021540.html
-
SUSE Security Update SUSE-SU-2025:01980-1 vom 2025-06-17
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021541.html
-
SUSE Security Update SUSE-SU-2025:01979-1 vom 2025-06-17
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021542.html
-
SUSE Security Update SUSE-SU-2025:01975-1 vom 2025-06-17
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021545.html
-
SUSE Security Update SUSE-SU-2025:01974-1 vom 2025-06-17
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021546.html
-
Xming Changelog 7.7.1.17 vom 2025-06-17
http://www.straightrunning.com/XmingNotes/changes.php
-
Ubuntu Security Notice USN-7573-1 vom 2025-06-17
https://ubuntu.com/security/notices/USN-7573-1
-
SUSE Security Update SUSE-SU-2025:01978-1 vom 2025-06-17
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021543.html
-
OpenBSD 7.6 Errata vom 2025-06-17
http://www.openbsd.org/errata76.html
-
OpenBSD 7.7 Errata vom 2025-06-17
http://www.openbsd.org/errata77.html
-
Ubuntu Security Notice USN-7573-2 vom 2025-06-18
https://ubuntu.com/security/notices/USN-7573-2
-
Fedora Security Advisory FEDORA-2025-E65A55C3D0 vom 2025-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-2025-e65a55c3d0
-
Fedora Security Advisory FEDORA-2025-CE130E2A91 vom 2025-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-2025-ce130e2a91
-
Fedora Security Advisory FEDORA-2025-B4D521F084 vom 2025-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-2025-b4d521f084
-
Fedora Security Advisory FEDORA-2025-3FA66AC98B vom 2025-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-2025-3fa66ac98b
-
Fedora Security Advisory FEDORA-2025-2363836C6C vom 2025-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-2025-2363836c6c
-
SUSE Security Update SUSE-SU-2025:02012-1 vom 2025-06-18
https://lists.suse.com/pipermail/sle-security-updates/2025-June/021573.html
-
Fedora Security Advisory FEDORA-2025-A7041D5F74 vom 2025-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-2025-a7041d5f74
-
Fedora Security Advisory FEDORA-2025-6AA06A969E vom 2025-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-2025-6aa06a969e
-
Fedora Security Advisory FEDORA-2025-BF47909CBA vom 2025-06-18
https://bodhi.fedoraproject.org/updates/FEDORA-2025-bf47909cba
-
Red Hat Security Advisory RHSA-2025:9305 vom 2025-06-23
https://access.redhat.com/errata/RHSA-2025:9305
-
Red Hat Security Advisory RHSA-2025:9306 vom 2025-06-23
https://access.redhat.com/errata/RHSA-2025:9306
-
Red Hat Security Advisory RHSA-2025:9303 vom 2025-06-23
https://access.redhat.com/errata/RHSA-2025:9303
-
Red Hat Security Advisory RHSA-2025:9304 vom 2025-06-23
https://access.redhat.com/errata/RHSA-2025:9304
-
Fedora Security Advisory FEDORA-2025-984E1CEE93 vom 2025-06-23
https://bodhi.fedoraproject.org/updates/FEDORA-2025-984e1cee93
-
Fedora Security Advisory FEDORA-2025-1FE27443E2 vom 2025-06-23
https://bodhi.fedoraproject.org/updates/FEDORA-2025-1fe27443e2
-
Red Hat Security Advisory RHSA-2025:9392 vom 2025-06-23
https://access.redhat.com/errata/RHSA-2025:9392
-
Oracle Linux Security Advisory ELSA-2025-9305 vom 2025-06-24
https://linux.oracle.com/errata/ELSA-2025-9305.html
-
Oracle Linux Security Advisory ELSA-2025-9392 vom 2025-06-24
https://linux.oracle.com/errata/ELSA-2025-9392.html
-
Debian Security Advisory DSA-5947 vom 2025-06-23
https://lists.debian.org/debian-security-announce/2025/msg00111.html
-
Oracle Linux Security Advisory ELSA-2025-9303 vom 2025-06-24
https://linux.oracle.com/errata/ELSA-2025-9303.html
-
Oracle Linux Security Advisory ELSA-2025-9306 vom 2025-06-24
https://linux.oracle.com/errata/ELSA-2025-9306.html
-
Oracle Linux Security Advisory ELSA-2025-9304 vom 2025-06-28
http://linux.oracle.com/errata/ELSA-2025-9304.html
-
Debian Security Advisory DLA-4230 vom 2025-06-26
https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html
-
Red Hat Security Advisory RHSA-2025:9964 vom 2025-06-30
https://access.redhat.com/errata/RHSA-2025:9964
-
SUSE Security Update SUSE-SU-2025:02192-1 vom 2025-07-01
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021734.html
-
SUSE Security Update SUSE-SU-2025:02191-1 vom 2025-07-01
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021735.html
-
SUSE Security Update SUSE-SU-2025:02187-1 vom 2025-07-01
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021731.html
-
SUSE Security Update SUSE-SU-2025:02208-1 vom 2025-07-02
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021738.html
-
Red Hat Security Advisory RHSA-2025:10258 vom 2025-07-02
https://access.redhat.com/errata/RHSA-2025:10258
-
SUSE Security Update SUSE-SU-2025:02206-1 vom 2025-07-02
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021740.html
-
SUSE Security Update SUSE-SU-2025:02207-1 vom 2025-07-02
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021739.html
-
Red Hat Security Advisory RHSA-2025:10343 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10343
-
Red Hat Security Advisory RHSA-2025:10347 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10347
-
Red Hat Security Advisory RHSA-2025:10348 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10348
-
openSUSE Security Update OPENSUSE-SU-2025:15311-1 vom 2025-07-05
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WYFCBUYKCLJZHFPBTYXS2ECVQPDPFJG3/
-
Red Hat Security Advisory RHSA-2025:10352 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10352
-
Red Hat Security Advisory RHSA-2025:10342 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10342
-
openSUSE Security Update OPENSUSE-SU-2025:15310-1 vom 2025-07-05
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OKF7NFRZKSLLYYTGBCMNT4MNROM52NR2/
-
SUSE Security Update SUSE-SU-2025:02225-1 vom 2025-07-04
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021752.html
-
SUSE Security Update SUSE-SU-2025:02224-1 vom 2025-07-04
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021753.html
-
Red Hat Security Advisory RHSA-2025:10370 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10370
-
Red Hat Security Advisory RHSA-2025:10374 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10374
-
Red Hat Security Advisory RHSA-2025:10375 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10375
-
Red Hat Security Advisory RHSA-2025:10376 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10376
-
Red Hat Security Advisory RHSA-2025:10377 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10377
-
Red Hat Security Advisory RHSA-2025:10378 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10378
-
Red Hat Security Advisory RHSA-2025:10381 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10381
-
Red Hat Security Advisory RHSA-2025:10344 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10344
-
Red Hat Security Advisory RHSA-2025:10346 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10346
-
Red Hat Security Advisory RHSA-2025:10349 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10349
-
Red Hat Security Advisory RHSA-2025:10350 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10350
-
Red Hat Security Advisory RHSA-2025:10351 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10351
-
Red Hat Security Advisory RHSA-2025:10360 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10360
-
Red Hat Security Advisory RHSA-2025:10355 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10355
-
Red Hat Security Advisory RHSA-2025:10356 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10356
-
Oracle Linux Security Advisory ELSA-2025-7458 vom 2025-07-07
https://linux.oracle.com/errata/ELSA-2025-7458.html
-
Red Hat Security Advisory RHSA-2025:10410 vom 2025-07-07
https://access.redhat.com/errata/RHSA-2025:10410
-
Amazon Linux Security Advisory ALAS2-2025-2917 vom 2025-07-10
https://alas.aws.amazon.com/AL2/ALAS2-2025-2917.html
-
Amazon Linux Security Advisory ALAS2-2025-2918 vom 2025-07-10
https://alas.aws.amazon.com/AL2/ALAS2-2025-2918.html
-
Oracle Linux Security Advisory ELSA-2025-10375 vom 2025-07-24
https://linux.oracle.com/errata/ELSA-2025-10375.html
-
Oracle Linux Security Advisory ELSA-2025-10360 vom 2025-07-24
https://linux.oracle.com/errata/ELSA-2025-10360.html
-
IBM Security Bulletin 7247777 vom 2025-10-13
https://www.ibm.com/support/pages/node/7247777
-
XEROX Security Advisory XRX25-018 vom 2025-11-18
https://security.business.xerox.com/wp-content/uploads/2025/11/Xerox-Security-Bulletin-XRX25-018-Xerox-FreeFlow-Print-Server-v7.pdf
-
Oracle Linux Security Advisory ELSA-2025-22096 vom 2025-12-11
http://linux.oracle.com/errata/ELSA-2025-22096.html
-
Oracle Linux Security Advisory ELSA-2025-22040 vom 2025-12-12
https://linux.oracle.com/errata/ELSA-2025-22040.html
-
Oracle Linux Security Advisory ELSA-2026-20590 vom 2026-07-09
https://linux.oracle.com/errata/ELSA-2026-20590.html
-
Oracle Linux Security Advisory ELSA-2026-22456 vom 2026-07-10
http://linux.oracle.com/errata/ELSA-2026-22456.html
-
Oracle Linux Security Advisory ELSA-2026-36083 vom 2026-08-14
https://linux.oracle.com/errata/ELSA-2026-36083.html