tigervnc security update

2024-05-2300:00:00

linux.oracle.com

cve-2024-21886

cve-2024-21885

cve-2024-0229

cve-2023-6816

cve-2023-6377

cve-2023-6478

cve-2023-5380

cve-2023-5367

devicestatenotify issue

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

Low

EPSS

Percentile

16.7%

JSON

[1.13.1-8]

Fix copy/paste error in the DeviceStateNotify
Resolves: RHEL-20530
[1.13.1-7]
Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
Resolves: RHEL-20388
Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
Resolves: RHEL-20382
Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
Resolves: RHEL-20530
Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
Resolves: RHEL-21214
[1.13.1-6]
Use dup() to get available file descriptor when using -inetd option
Resolves: RHEL-21000
[1.13.1-5]
Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
Resolves: RHEL-18410
Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
Resolves: RHEL-18422
[1.13.1-4]
Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
Resolves: RHEL-15236
Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
Resolves: RHEL-15230
[1.13.1-3]
Support username alias in PlainUsers
Resolves: RHEL-4258

OSVersionArchitecturePackageVersionFilename
oracle linux8srctigervnc< 1.13.1-8.el8tigervnc-1.13.1-8.el8.src.rpm
oracle linux8aarch64tigervnc< 1.13.1-8.el8tigervnc-1.13.1-8.el8.aarch64.rpm
oracle linux8noarchtigervnc-icons< 1.13.1-8.el8tigervnc-icons-1.13.1-8.el8.noarch.rpm
oracle linux8noarchtigervnc-license< 1.13.1-8.el8tigervnc-license-1.13.1-8.el8.noarch.rpm
oracle linux8noarchtigervnc-selinux< 1.13.1-8.el8tigervnc-selinux-1.13.1-8.el8.noarch.rpm
oracle linux8aarch64tigervnc-server< 1.13.1-8.el8tigervnc-server-1.13.1-8.el8.aarch64.rpm
oracle linux8aarch64tigervnc-server-minimal< 1.13.1-8.el8tigervnc-server-minimal-1.13.1-8.el8.aarch64.rpm
oracle linux8aarch64tigervnc-server-module< 1.13.1-8.el8tigervnc-server-module-1.13.1-8.el8.aarch64.rpm
oracle linux8srctigervnc< 1.13.1-8.el8tigervnc-1.13.1-8.el8.src.rpm
oracle linux8x86_64tigervnc< 1.13.1-8.el8tigervnc-1.13.1-8.el8.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	tigervnc	< 1.13.1-8.el8	tigervnc-1.13.1-8.el8.src.rpm
oracle linux	8	aarch64	tigervnc	< 1.13.1-8.el8	tigervnc-1.13.1-8.el8.aarch64.rpm
oracle linux	8	noarch	tigervnc-icons	< 1.13.1-8.el8	tigervnc-icons-1.13.1-8.el8.noarch.rpm
oracle linux	8	noarch	tigervnc-license	< 1.13.1-8.el8	tigervnc-license-1.13.1-8.el8.noarch.rpm
oracle linux	8	noarch	tigervnc-selinux	< 1.13.1-8.el8	tigervnc-selinux-1.13.1-8.el8.noarch.rpm
oracle linux	8	aarch64	tigervnc-server	< 1.13.1-8.el8	tigervnc-server-1.13.1-8.el8.aarch64.rpm
oracle linux	8	aarch64	tigervnc-server-minimal	< 1.13.1-8.el8	tigervnc-server-minimal-1.13.1-8.el8.aarch64.rpm
oracle linux	8	aarch64	tigervnc-server-module	< 1.13.1-8.el8	tigervnc-server-module-1.13.1-8.el8.aarch64.rpm
oracle linux	8	src	tigervnc	< 1.13.1-8.el8	tigervnc-1.13.1-8.el8.src.rpm
oracle linux	8	x86_64	tigervnc	< 1.13.1-8.el8	tigervnc-1.13.1-8.el8.x86_64.rpm