CVE-2025-49176 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.3 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
redhat	CNA	7.3 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
CISA-ADP	ADP	---				---
CVE	ADP	---				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 11%

Debian Releases

Debian Product

Codename

xorg-server

bullseye	vulnerable
trixie	2:21.1.16-1.3 ignored
bookworm	2:21.1.7-3+deb12u10 ignored
bullseye (security)	2:1.20.11-1+deb11u17 fixed
bookworm (security)	2:21.1.7-3+deb12u11 fixed
trixie (security)	2:21.1.16-1.3+deb13u1 fixed
forky	2:21.1.18-2 fixed
sid	2:21.1.20-1 fixed

xwayland

bookworm	ignored
trixie	ignored
forky	2:24.1.8-1 fixed
sid	2:24.1.8-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

xorg-server

plucky	Fixed 2:21.1.16-1ubuntu1.1 released
oracular	Fixed 2:21.1.13-2ubuntu1.4 released
noble	Fixed 2:21.1.12-1ubuntu1.4 released
jammy	Fixed 2:21.1.4-2ubuntu1.7~22.04.15 released
focal	Fixed 2:1.20.13-1ubuntu1~20.04.20+esm1 released
bionic	Fixed 2:1.19.6-1ubuntu4.15+esm13 released
xenial	Fixed 2:1.18.4-0ubuntu0.12+esm18 released
trusty	needs-triage

xwayland

plucky	Fixed 2:24.1.6-1ubuntu0.1 released
oracular	Fixed 2:24.1.2-1ubuntu0.6 released
noble	Fixed 2:23.2.6-1ubuntu0.6 released
jammy	Fixed 2:22.1.1-1ubuntu0.19 released

xorg-hwe-16.04

plucky	dne
oracular	dne
noble	dne
jammy	dne
xenial	not-affected

xorg

plucky	not-affected
oracular	not-affected
noble	not-affected
jammy	not-affected
focal	not-affected
bionic	not-affected
xenial	not-affected

xorg-server-hwe-16.04

plucky	dne
oracular	dne
noble	dne
jammy	dne
xenial	Fixed 2:1.19.6-1ubuntu4.1~16.04.6+esm10 released

xorg-server-hwe-18.04

plucky	dne
oracular	dne
noble	dne
jammy	dne
bionic	Fixed 2:1.20.8-2ubuntu2.2~18.04.11+esm5 released

xorg-hwe-18.04

plucky	dne
oracular	dne
noble	dne
jammy	dne
bionic	not-affected

Common Weakness Enumeration

CWE-190 - Integer Overflow or Wraparound
The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

References

https://access.redhat.com/errata/RHSA-2025:10258

https://access.redhat.com/errata/RHSA-2025:10342

https://access.redhat.com/errata/RHSA-2025:10343

https://access.redhat.com/errata/RHSA-2025:10344

https://access.redhat.com/errata/RHSA-2025:10346

https://access.redhat.com/errata/RHSA-2025:10347

https://access.redhat.com/errata/RHSA-2025:10348

https://access.redhat.com/errata/RHSA-2025:10349

https://access.redhat.com/errata/RHSA-2025:10350

https://access.redhat.com/errata/RHSA-2025:10351

https://access.redhat.com/errata/RHSA-2025:10352

https://access.redhat.com/errata/RHSA-2025:10355

https://access.redhat.com/errata/RHSA-2025:10356

https://access.redhat.com/errata/RHSA-2025:10360

https://access.redhat.com/errata/RHSA-2025:10370

https://access.redhat.com/errata/RHSA-2025:10374

https://access.redhat.com/errata/RHSA-2025:10375

https://access.redhat.com/errata/RHSA-2025:10376

https://access.redhat.com/errata/RHSA-2025:10377

https://access.redhat.com/errata/RHSA-2025:10378

https://access.redhat.com/errata/RHSA-2025:10381

https://access.redhat.com/errata/RHSA-2025:10410

https://access.redhat.com/errata/RHSA-2025:9303

https://access.redhat.com/errata/RHSA-2025:9304

https://access.redhat.com/errata/RHSA-2025:9305

https://access.redhat.com/errata/RHSA-2025:9306

https://access.redhat.com/errata/RHSA-2025:9392

https://access.redhat.com/errata/RHSA-2025:9964

https://access.redhat.com/security/cve/CVE-2025-49176

https://bugzilla.redhat.com/show_bug.cgi?id=2369954

http://www.openwall.com/lists/oss-security/2025/06/18/2