Logo
vulnerabilityCVE-2025-49178
Name
CVE-2025-49178
Source
NVD ( link)Debian ( link)
Description
A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
xserver-xorg
Patched
xwayland
Patched

Vulnerability Ratings#


5.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
24.1.12
Not Affected
buildroot
master
24.1.12
Not Affected
yocto
master
21.1.23
Not Affected
yocto
master
24.1.12
Not Affected
yocto
scarthgap
21.1.18
Not Affected
yocto
scarthgap
23.2.5
Patched

Resolved with patches#


xserver-xorg (yocto:kirkstone)

#
Title
Author
Resolve
1
os: Account for bytes to ignore when sharing input buffer
Olivier Fourdan <ofourdan@redhat.com>
CVE-2025-49178

xwayland (yocto:kirkstone)

#
Title
Author
Resolve
1
os: Account for bytes to ignore when sharing input buffer
Olivier Fourdan <ofourdan@redhat.com>
CVE-2025-49178

xwayland (yocto:scarthgap)

#
Title
Author
Resolve
1
os: Account for bytes to ignore when sharing input buffer
Olivier Fourdan <ofourdan@redhat.com>
CVE-2025-49178