# CVE-2025-49178

## Summary

- **CVE ID:** CVE-2025-49178
- **Severity:** MEDIUM
- **CVSS Score:** 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
- **CWE:** CWE-667
- **Published:** Jun 17, 2025
- **Last Modified:** Jun 30, 2026

## Description

A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a denial of service.

## Affected Products

- X.Org — xwayland (0)
- Red Hat — Red Hat Enterprise Linux 10 (0:24.1.5-4.el10_0)
- Red Hat — Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION (0:1.1.0-25.el6_10.1)
- Red Hat — Red Hat Enterprise Linux 7.7 Advanced Update Support (0:1.8.0-17.el7_7.1)
- Red Hat — Red Hat Enterprise Linux 7 Extended Lifecycle Support (0:1.20.4-32.el7_9)
- Red Hat — Red Hat Enterprise Linux 7 Extended Lifecycle Support (0:1.8.0-36.el7_9.2)
- Red Hat — Red Hat Enterprise Linux 8 (0:1.20.11-26.el8_10)
- Red Hat — Red Hat Enterprise Linux 8 (0:21.1.3-18.el8_10)
- Red Hat — Red Hat Enterprise Linux 8 (0:1.15.0-7.el8_10)
- Red Hat — Red Hat Enterprise Linux 8.2 Advanced Update Support (0:1.9.0-15.el8_2.14)
- Red Hat — Red Hat Enterprise Linux 8.2 Advanced Update Support (0:1.20.6-4.el8_2)
- Red Hat — Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (0:1.20.10-2.el8_4)
- Red Hat — Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (0:1.11.0-8.el8_4.13)
- Red Hat — Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On (0:1.20.10-2.el8_4)
- Red Hat — Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On (0:1.11.0-8.el8_4.13)
- Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:1.12.0-6.el8_6.14)
- Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:21.1.3-2.el8_6.4)
- Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:1.20.11-5.el8_6.3)
- Red Hat — Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On (0:1.12.0-6.el8_6.14)
- Red Hat — Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On (0:21.1.3-2.el8_6.4)
- Red Hat — Red Hat Enterprise Linux 8.6 Telecommunications Update Service (0:1.12.0-6.el8_6.14)
- Red Hat — Red Hat Enterprise Linux 8.6 Telecommunications Update Service (0:21.1.3-2.el8_6.4)
- Red Hat — Red Hat Enterprise Linux 8.6 Telecommunications Update Service (0:1.20.11-5.el8_6.3)
- Red Hat — Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (0:1.12.0-6.el8_6.14)
- Red Hat — Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (0:21.1.3-2.el8_6.4)
- Red Hat — Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (0:1.20.11-5.el8_6.3)
- Red Hat — Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On (0:1.20.11-16.el8_8)
- Red Hat — Red Hat Enterprise Linux 8.8 Extended Update Support Long-Life Add-On (0:21.1.3-11.el8_8)
- Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:1.20.11-16.el8_8)
- Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:1.12.0-15.el8_8.14)
- Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:21.1.3-11.el8_8)
- Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:1.20.11-16.el8_8)
- Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:1.12.0-15.el8_8.14)
- Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:21.1.3-11.el8_8)
- Red Hat — Red Hat Enterprise Linux 9 (0:1.20.11-31.el9_6)
- Red Hat — Red Hat Enterprise Linux 9 (0:23.2.7-4.el9_6)
- Red Hat — Red Hat Enterprise Linux 9 (0:1.14.1-8.el9_6)
- Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:21.1.3-3.el9_0)
- Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:1.20.11-11.el9_0)
- Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:1.11.0-22.el9_0.15)
- Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:21.1.3-8.el9_2)
- Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:1.20.11-18.el9_2)
- Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:1.12.0-14.el9_2.12)
- Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:22.1.9-6.el9_4)
- Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:1.20.11-26.el9_4)
- Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:1.13.1-8.el9_4.7)

## References

- [CNA](https://access.redhat.com/errata/RHSA-2025:10258)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10342)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10343)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10344)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10346)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10347)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10348)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10349)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10350)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10351)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10352)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10355)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10356)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10360)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10370)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10374)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10375)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10376)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10377)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10378)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10381)
- [CNA](https://access.redhat.com/errata/RHSA-2025:10410)
- [CNA](https://access.redhat.com/errata/RHSA-2025:9303)
- [CNA](https://access.redhat.com/errata/RHSA-2025:9304)
- [CNA](https://access.redhat.com/errata/RHSA-2025:9305)
- [CNA](https://access.redhat.com/errata/RHSA-2025:9306)
- [CNA](https://access.redhat.com/errata/RHSA-2025:9392)
- [CNA](https://access.redhat.com/errata/RHSA-2025:9964)
- [CNA](https://access.redhat.com/security/cve/CVE-2025-49178)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2369977)
- [CNA](https://gitlab.freedesktop.org/xorg/xserver/-/commit/d55c54cecb5e83eaa2d56bed5cc4461f9ba318c2)
- [CNA](https://www.x.org/wiki/Development/Security/)
- [CVE](https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.23%
- **EPSS Percentile:** 13.7

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-12._