PT-2025-25689 · Eserver+11 · Server+11

Published 2025-03-27 · Updated 2025-12-12 · CVE-2025-49178

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

ALSA-2025:9303

ALSA-2025:9304

ALSA-2025:9305

ALSA-2025:9306

ALSA-2025:9392

ALT-PU-2025-8331

ALT-PU-2025-8333

AZL-64202

AZL-64230

AZL-64259

BDU:2025-12255

CESA-2025_9305

CESA-2025_9392

CVE-2025-49178

DLA-4230-1

DSA-5947-1

INFSA-2025_9303

INFSA-2025_9305

INFSA-2025_9306

INFSA-2025_9392

MGASA-2025-0199

OPENSUSE-SU-2025:15310-1

OPENSUSE-SU-2025:15311-1

RHSA-2025:10258

RHSA-2025:10342

RHSA-2025:10343

RHSA-2025:10344

RHSA-2025:10346

RHSA-2025:10347

RHSA-2025:10348

RHSA-2025:10349

RHSA-2025:10350

RHSA-2025:10351

RHSA-2025:10352

RHSA-2025:10355

RHSA-2025:10356

RHSA-2025:10360

RHSA-2025:10370

RHSA-2025:10374

RHSA-2025:10375

RHSA-2025:10376

RHSA-2025:10377

RHSA-2025:10378

RHSA-2025:10381

RHSA-2025:10410

RHSA-2025:9303

RHSA-2025:9304

RHSA-2025:9305

RHSA-2025:9306

RHSA-2025:9392

RHSA-2025:9964

RHSA-2025_9303

RHSA-2025_9305

RHSA-2025_9306

RHSA-2025_9392

SUSE-SU-2025:01974-1

SUSE-SU-2025:01975-1

SUSE-SU-2025:01977-1

SUSE-SU-2025:01978-1

SUSE-SU-2025:01979-1

SUSE-SU-2025:01980-1

SUSE-SU-2025:01981-1

SUSE-SU-2025:02012-1

SUSE-SU-2025_01977-1

SUSE-SU-2025_01978-1

SUSE-SU-2025_01979-1

SUSE-SU-2025_01980-1

SUSE-SU-2025_01981-1

SUSE-SU-2025_02012-1

USN-7573-1

USN-7573-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Ibm Aix

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Server

References · 140

• https://ubuntu.com/security/CVE-2025-49179 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:10370 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-64259 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49178 · Security Note
• https://access.redhat.com/errata/RHSA-2025:10377 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0199.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01980-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01979-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:10258 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:9306 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:10375 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:9306 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01974-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-9306.html · Vendor Advisory