CVE-2025-49179 | THREATINT

Description

A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.

Reserved 2025-06-03 | Published 2025-06-17 | Updated 2025-06-17 | Assigner redhat

MEDIUM: 6.6CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Problem types

Integer Overflow or Wraparound

Product status

Default status

affected

Default status

affected

Default status

affected

Default status

affected

Default status

affected

Default status

affected

Default status

affected

Default status

affected

Default status

affected

Default status

affected

Default status

affected

Timeline

2025-06-03:	Reported to Red Hat.
2025-06-17:	Made public.

References

access.redhat.com/security/cve/CVE-2025-49179 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2369978 (RHBZ#2369978) issue-tracking

cve.org (CVE-2025-49179)

nvd.nist.gov (CVE-2025-49179)

Download JSON