Description (CNA)
A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| X.Org / xwayland | affected 0 before 24.1.7 |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected 0:24.1.5-4.el10_0 before * |
| Red Hat / Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION | unaffected 0:1.1.0-25.el6_10.1 before * |
| Red Hat / Red Hat Enterprise Linux 7.7 Advanced Update Support | unaffected 0:1.8.0-17.el7_7.1 before * |
| Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support | unaffected 0:1.20.4-32.el7_9 before * |
| Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support | unaffected 0:1.8.0-36.el7_9.2 before * |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected 0:1.20.11-26.el8_10 before * |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected 0:21.1.3-18.el8_10 before * |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected 0:1.15.0-7.el8_10 before * |
| Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Support | unaffected 0:1.9.0-15.el8_2.14 before * |
| Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Support | unaffected 0:1.20.6-4.el8_2 before * |
| Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | unaffected 0:1.20.10-2.el8_4 before * |
| Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | unaffected 0:1.11.0-8.el8_4.13 before * |
| Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | unaffected 0:1.20.10-2.el8_4 before * |
| Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | unaffected 0:1.11.0-8.el8_4.13 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | unaffected 0:1.12.0-6.el8_6.14 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | unaffected 0:21.1.3-2.el8_6.4 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | unaffected 0:1.20.11-5.el8_6.3 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | unaffected 0:1.12.0-6.el8_6.14 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | unaffected 0:21.1.3-2.el8_6.4 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service | unaffected 0:1.12.0-6.el8_6.14 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service | unaffected 0:21.1.3-2.el8_6.4 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service | unaffected 0:1.20.11-5.el8_6.3 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | unaffected 0:1.12.0-6.el8_6.14 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | unaffected 0:21.1.3-2.el8_6.4 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | unaffected 0:1.20.11-5.el8_6.3 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On | unaffected 0:1.20.11-16.el8_8 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On | unaffected 0:21.1.3-11.el8_8 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service | unaffected 0:1.20.11-16.el8_8 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service | unaffected 0:1.12.0-15.el8_8.14 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service | unaffected 0:21.1.3-11.el8_8 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | unaffected 0:1.20.11-16.el8_8 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | unaffected 0:1.12.0-15.el8_8.14 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | unaffected 0:21.1.3-11.el8_8 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:1.20.11-31.el9_6 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:23.2.7-4.el9_6 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:1.14.1-8.el9_6 before * |
| Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | unaffected 0:21.1.3-3.el9_0 before * |
| Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | unaffected 0:1.20.11-11.el9_0 before * |
| Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | unaffected 0:1.11.0-22.el9_0.15 before * |
| Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | unaffected 0:21.1.3-8.el9_2 before * |
| Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | unaffected 0:1.20.11-18.el9_2 before * |
| Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | unaffected 0:1.12.0-14.el9_2.12 before * |
| Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support | unaffected 0:22.1.9-6.el9_4 before * |
| Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support | unaffected 0:1.20.11-26.el9_4 before * |
| Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support | unaffected 0:1.13.1-8.el9_4.7 before * |
| Red Hat / Red Hat Enterprise Linux 6 | affected |
CWE
CWE-190
References
- https://access.redhat.com/errata/RHSA-2025:10258
- https://access.redhat.com/errata/RHSA-2025:10342
- https://access.redhat.com/errata/RHSA-2025:10343
- https://access.redhat.com/errata/RHSA-2025:10344
- https://access.redhat.com/errata/RHSA-2025:10346
- https://access.redhat.com/errata/RHSA-2025:10347
- https://access.redhat.com/errata/RHSA-2025:10348
- https://access.redhat.com/errata/RHSA-2025:10349
- https://access.redhat.com/errata/RHSA-2025:10350
- https://access.redhat.com/errata/RHSA-2025:10351
- https://access.redhat.com/errata/RHSA-2025:10352
- https://access.redhat.com/errata/RHSA-2025:10355
- https://access.redhat.com/errata/RHSA-2025:10356
- https://access.redhat.com/errata/RHSA-2025:10360
- https://access.redhat.com/errata/RHSA-2025:10370
- https://access.redhat.com/errata/RHSA-2025:10374
- https://access.redhat.com/errata/RHSA-2025:10375
- https://access.redhat.com/errata/RHSA-2025:10376
- https://access.redhat.com/errata/RHSA-2025:10377
- https://access.redhat.com/errata/RHSA-2025:10378
- https://access.redhat.com/errata/RHSA-2025:10381
- https://access.redhat.com/errata/RHSA-2025:10410
- https://access.redhat.com/errata/RHSA-2025:9303
- https://access.redhat.com/errata/RHSA-2025:9304
- https://access.redhat.com/errata/RHSA-2025:9305
- https://access.redhat.com/errata/RHSA-2025:9306
- https://access.redhat.com/errata/RHSA-2025:9392
- https://access.redhat.com/errata/RHSA-2025:9964
- https://access.redhat.com/security/cve/CVE-2025-49179
- https://bugzilla.redhat.com/show_bug.cgi?id=2369978
- https://gitlab.freedesktop.org/xorg/xserver/-/commit/2bde9ca49a8fd9a1e6697d5e7ef837870d66f5d4
- https://www.x.org/wiki/Development/Security/
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.