tigervnc security update

2024-05-0200:00:00

linux.oracle.com

tigervnc

security

update

unix

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

Low

EPSS

Percentile

16.7%

JSON

[1.13.1-8]

Fix copy/paste error in the DeviceStateNotify
Resolves: RHEL-20533
[1.13.1-7]
Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
Resolves: RHEL-20389
Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
Resolves: RHEL-20383
Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
Resolves: RHEL-20533
Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
Resolves: RHEL-21213
[1.13.1-6]
Use dup() to get available file descriptor when using -inetd option
Resolves: RHEL-19858
[1.13.1-5]
Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
Resolves: RHEL-18414
Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
Resolves: RHEL-18426
[1.13.1-4]
Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
Resolves: RHEL-15237
Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
Resolves: RHEL-15249

OSVersionArchitecturePackageVersionFilename
oracle linux9srctigervnc< 1.13.1-8.el9tigervnc-1.13.1-8.el9.src.rpm
oracle linux9aarch64tigervnc< 1.13.1-8.el9tigervnc-1.13.1-8.el9.aarch64.rpm
oracle linux9noarchtigervnc-icons< 1.13.1-8.el9tigervnc-icons-1.13.1-8.el9.noarch.rpm
oracle linux9noarchtigervnc-license< 1.13.1-8.el9tigervnc-license-1.13.1-8.el9.noarch.rpm
oracle linux9noarchtigervnc-selinux< 1.13.1-8.el9tigervnc-selinux-1.13.1-8.el9.noarch.rpm
oracle linux9aarch64tigervnc-server< 1.13.1-8.el9tigervnc-server-1.13.1-8.el9.aarch64.rpm
oracle linux9aarch64tigervnc-server-minimal< 1.13.1-8.el9tigervnc-server-minimal-1.13.1-8.el9.aarch64.rpm
oracle linux9aarch64tigervnc-server-module< 1.13.1-8.el9tigervnc-server-module-1.13.1-8.el9.aarch64.rpm
oracle linux9srctigervnc< 1.13.1-8.el9tigervnc-1.13.1-8.el9.src.rpm
oracle linux9x86_64tigervnc< 1.13.1-8.el9tigervnc-1.13.1-8.el9.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	tigervnc	< 1.13.1-8.el9	tigervnc-1.13.1-8.el9.src.rpm
oracle linux	9	aarch64	tigervnc	< 1.13.1-8.el9	tigervnc-1.13.1-8.el9.aarch64.rpm
oracle linux	9	noarch	tigervnc-icons	< 1.13.1-8.el9	tigervnc-icons-1.13.1-8.el9.noarch.rpm
oracle linux	9	noarch	tigervnc-license	< 1.13.1-8.el9	tigervnc-license-1.13.1-8.el9.noarch.rpm
oracle linux	9	noarch	tigervnc-selinux	< 1.13.1-8.el9	tigervnc-selinux-1.13.1-8.el9.noarch.rpm
oracle linux	9	aarch64	tigervnc-server	< 1.13.1-8.el9	tigervnc-server-1.13.1-8.el9.aarch64.rpm
oracle linux	9	aarch64	tigervnc-server-minimal	< 1.13.1-8.el9	tigervnc-server-minimal-1.13.1-8.el9.aarch64.rpm
oracle linux	9	aarch64	tigervnc-server-module	< 1.13.1-8.el9	tigervnc-server-module-1.13.1-8.el9.aarch64.rpm
oracle linux	9	src	tigervnc	< 1.13.1-8.el9	tigervnc-1.13.1-8.el9.src.rpm
oracle linux	9	x86_64	tigervnc	< 1.13.1-8.el9	tigervnc-1.13.1-8.el9.x86_64.rpm