Lucene search
OracleLinuxELSA-2024-0006HistoryJan 02, 2024 - 12:00 a.m.
tigervnc security update
2024-01-0200:00:00
linux.oracle.com
11
tigervnc
security updates
dropped patches
fixed patches
cve-2023-6377
cve-2023-6478
xorg-x11-server
rhel-18415
rhel-18427
out-of-bounds
memory reads/writes
rrchangeoutputproperty
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.4 High
AI Score
Confidence
Low
0.273 Low
EPSS
Percentile
96.8%
[1.8.0-28.0.1]
- Dropped xorg-CVE-2023-5367.patch, xorg-CVE-2023-6377.patch, and xorg-CVE-2023-6478.patch
[1.8.0-28] - Updated fix for CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
Resolves: RHEL-18415
[1.8.0-27] - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
Resolves: RHEL-18415 - CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
Resolves: RHEL-18427
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | tigervnc | < 1.8.0-28.0.1.el7_9 | tigervnc-1.8.0-28.0.1.el7_9.src.rpm |
| oracle linux | 7 | src | tigervnc | < 1.8.0-28.0.1.el7_9 | tigervnc-1.8.0-28.0.1.el7_9.src.rpm |
| oracle linux | 7 | src | tigervnc | < 1.8.0-28.0.1.el7_9 | tigervnc-1.8.0-28.0.1.el7_9.src.rpm |
| oracle linux | 7 | aarch64 | tigervnc | < 1.8.0-28.0.1.el7_9 | tigervnc-1.8.0-28.0.1.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | tigervnc | < 1.8.0-28.0.1.el7_9 | tigervnc-1.8.0-28.0.1.el7_9.aarch64.rpm |
| oracle linux | 7 | noarch | tigervnc-icons | < 1.8.0-28.0.1.el7_9 | tigervnc-icons-1.8.0-28.0.1.el7_9.noarch.rpm |
| oracle linux | 7 | noarch | tigervnc-icons | < 1.8.0-28.0.1.el7_9 | tigervnc-icons-1.8.0-28.0.1.el7_9.noarch.rpm |
| oracle linux | 7 | noarch | tigervnc-license | < 1.8.0-28.0.1.el7_9 | tigervnc-license-1.8.0-28.0.1.el7_9.noarch.rpm |
| oracle linux | 7 | noarch | tigervnc-license | < 1.8.0-28.0.1.el7_9 | tigervnc-license-1.8.0-28.0.1.el7_9.noarch.rpm |
| oracle linux | 7 | aarch64 | tigervnc-server | < 1.8.0-28.0.1.el7_9 | tigervnc-server-1.8.0-28.0.1.el7_9.aarch64.rpm |
Related
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : X.Org X Server vulnerabilities (USN-6555-1)
2023-12-13 00:00:00
Oracle Linux 7 : xorg-x11-server (ELSA-2024-0009)
2024-01-02 00:00:00
CentOS 8 : tigervnc (CESA-2024:0018)
2024-01-09 00:00:00
osv
osv
xorg-server - security update
2023-12-13 00:00:00
xorg-server - security update
2023-12-13 00:00:00
xorg-server vulnerabilities
2023-12-13 17:41:03
openvas
openvas
Slackware: Security Advisory (SSA:2023-347-01)
2023-12-14 00:00:00
Fedora: Security Advisory for xorg-x11-server (FEDORA-2023-52460bedda)
2023-12-16 00:00:00
openSUSE: Security Advisory for xorg (SUSE-SU-2023:4791-1)
2024-03-04 00:00:00
oraclelinux
oraclelinux
tigervnc security update
2024-01-04 00:00:00
xorg-x11-server security update
2024-01-02 00:00:00
tigervnc security update
2024-01-03 00:00:00
redhat
redhat
(RHSA-2024:0018) Important: tigervnc security update
2024-01-02 06:54:05
(RHSA-2024:0016) Important: tigervnc security update
2024-01-02 06:53:58
(RHSA-2023:7886) Important: tigervnc security update
2023-12-20 12:27:59
fedora
fedora
[SECURITY] Fedora 39 Update: xorg-x11-server-1.20.14-28.fc39
2023-12-15 01:33:14
[SECURITY] Fedora 39 Update: xorg-x11-server-Xwayland-23.2.3-1.fc39
2023-12-19 01:12:16
[SECURITY] Fedora 38 Update: xorg-x11-server-Xwayland-22.1.9-4.fc38
2023-12-25 03:37:33
freebsd
freebsd
xorg-server -- Multiple vulnerabilities
2023-12-13 00:00:00
almalinux
almalinux
Important: tigervnc security update
2024-01-02 00:00:00
Important: tigervnc security update
2024-01-02 00:00:00
Moderate: xorg-x11-server-Xwayland security update
2024-05-22 00:00:00
amazon
amazon
Important: xorg-x11-server
2024-01-03 21:04:00
Important: xorg-x11-server
2024-01-03 22:37:00
debian
debian
[SECURITY] [DLA 3686-1] xorg-server security update
2023-12-13 08:30:41
[SECURITY] [DSA 5576-1] xorg-server security update
2023-12-13 07:02:47
[SECURITY] [DSA 5576-2] xorg-server security update
2023-12-17 13:03:35
slackware
slackware
[slackware-security] xorg-server
2023-12-13 22:08:24
[slackware-security] tigervnc
2024-01-21 20:53:54
ubuntu
ubuntu
X.Org X Server vulnerabilities
2023-12-13 00:00:00
X.Org X Server vulnerabilities
2023-12-13 00:00:00
X.Org X Server vulnerabilities
2024-03-13 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2324
2024-01-23 12:14:57
mageia
mageia
Updated x11-server and tigervnc packages fix security vulnerabilities
2024-01-15 01:23:43
centos
centos
tigervnc security update
2024-01-12 19:01:36
xorg security update
2024-01-12 19:00:25
redos
redos
ROS-20240408-08
2024-04-08 00:00:00
cvelist
cvelist
zdi
zdi
alpinelinux
alpinelinux
CVE-2023-6377
2023-12-13 07:15:30
CVE-2023-6478
2023-12-13 07:15:31
cbl_mariner
cbl_mariner
veracode
veracode
Remote Code Execution
2023-12-15 07:04:27
Integer Overflow
2023-12-15 07:30:42
redhatcve
redhatcve
CVE-2023-6377
2023-12-13 06:27:20
CVE-2023-6478
2023-12-13 06:27:26
nvd
nvd
CVE-2023-6377
2023-12-13 07:15:30
CVE-2023-6478
2023-12-13 07:15:31
ubuntucve
ubuntucve
CVE-2023-6377
2023-12-13 00:00:00
CVE-2023-6478
2023-12-13 00:00:00
prion
prion
Out-of-bounds
2023-12-13 07:15:00
Integer overflow
2023-12-13 07:15:00
cve
cve
CVE-2023-6377
2023-12-13 07:15:30
CVE-2023-6478
2023-12-13 07:15:31
debiancve
debiancve
CVE-2023-6377
2023-12-13 07:15:30
CVE-2023-6478
2023-12-13 07:15:31
gentoo
gentoo
X.Org X Server, XWayland: Multiple Vulnerabilities
2024-01-31 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.4 High
AI Score
Confidence
Low
0.273 Low
EPSS
Percentile
96.8%
Related for ELSA-2024-0006