Lucene search

K
almalinuxAlmaLinuxALSA-2024:0010
HistoryJan 02, 2024 - 12:00 a.m.

Important: tigervnc security update

2024-01-0200:00:00
errata.almalinux.org
8
tigervnc
security update
out-of-bounds writes
memory reads/writes
xorg-x11-server

7.2 High

AI Score

Confidence

Low

0.266 Low

EPSS

Percentile

96.7%

Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

Security Fix(es):

  • xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
  • xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
  • xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.