Description
A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- X.Org / xwayland0 – 24.1.7
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10258
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10342
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10343
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10344
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10346
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10347
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10348
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10349
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10350
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10351
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10352
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10355
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10356
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10360
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10370
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10374
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10375
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10376
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10377
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10378
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10381
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:10410
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9303
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9304
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9305
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9306
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9392
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:9964
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2025-49178
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2369977
- MISChttps://gitlab.freedesktop.org/xorg/xserver/-/commit/d55c54cecb5e83eaa2d56bed5cc4461f9ba318c2
- MISChttps://www.x.org/wiki/Development/Security/
Updated 31m ago · 8 sources