tigervnc security update

2024-05-2900:00:00

linux.oracle.com

tigervnc

security update

patch

cve fixes

xorg-x11-server

resolution

heap buffer

user-after-free

data leakage

copy/paste error

overflow

out-of-bounds memory access

dup

file descriptor

username alias

plainusers

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

17.1%

JSON

[1.13.1-10]

Drop patches that are already part of xorg-x11-server
Resolves: RHEL-30755
Resolves: RHEL-30767
Resolves: RHEL-30761
[1.13.1-9]
Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
Resolves: RHEL-30755
Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
Resolves: RHEL-30767
Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
Resolves: RHEL-30761

OSVersionArchitecturePackageVersionFilename
oracle linux8srctigervnc< 1.13.1-10.el8_10tigervnc-1.13.1-10.el8_10.src.rpm
oracle linux8aarch64tigervnc< 1.13.1-10.el8_10tigervnc-1.13.1-10.el8_10.aarch64.rpm
oracle linux8noarchtigervnc-icons< 1.13.1-10.el8_10tigervnc-icons-1.13.1-10.el8_10.noarch.rpm
oracle linux8noarchtigervnc-license< 1.13.1-10.el8_10tigervnc-license-1.13.1-10.el8_10.noarch.rpm
oracle linux8noarchtigervnc-selinux< 1.13.1-10.el8_10tigervnc-selinux-1.13.1-10.el8_10.noarch.rpm
oracle linux8aarch64tigervnc-server< 1.13.1-10.el8_10tigervnc-server-1.13.1-10.el8_10.aarch64.rpm
oracle linux8aarch64tigervnc-server-minimal< 1.13.1-10.el8_10tigervnc-server-minimal-1.13.1-10.el8_10.aarch64.rpm
oracle linux8aarch64tigervnc-server-module< 1.13.1-10.el8_10tigervnc-server-module-1.13.1-10.el8_10.aarch64.rpm
oracle linux8srctigervnc< 1.13.1-10.el8_10tigervnc-1.13.1-10.el8_10.src.rpm
oracle linux8x86_64tigervnc< 1.13.1-10.el8_10tigervnc-1.13.1-10.el8_10.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	tigervnc	< 1.13.1-10.el8_10	tigervnc-1.13.1-10.el8_10.src.rpm
oracle linux	8	aarch64	tigervnc	< 1.13.1-10.el8_10	tigervnc-1.13.1-10.el8_10.aarch64.rpm
oracle linux	8	noarch	tigervnc-icons	< 1.13.1-10.el8_10	tigervnc-icons-1.13.1-10.el8_10.noarch.rpm
oracle linux	8	noarch	tigervnc-license	< 1.13.1-10.el8_10	tigervnc-license-1.13.1-10.el8_10.noarch.rpm
oracle linux	8	noarch	tigervnc-selinux	< 1.13.1-10.el8_10	tigervnc-selinux-1.13.1-10.el8_10.noarch.rpm
oracle linux	8	aarch64	tigervnc-server	< 1.13.1-10.el8_10	tigervnc-server-1.13.1-10.el8_10.aarch64.rpm
oracle linux	8	aarch64	tigervnc-server-minimal	< 1.13.1-10.el8_10	tigervnc-server-minimal-1.13.1-10.el8_10.aarch64.rpm
oracle linux	8	aarch64	tigervnc-server-module	< 1.13.1-10.el8_10	tigervnc-server-module-1.13.1-10.el8_10.aarch64.rpm
oracle linux	8	src	tigervnc	< 1.13.1-10.el8_10	tigervnc-1.13.1-10.el8_10.src.rpm
oracle linux	8	x86_64	tigervnc	< 1.13.1-10.el8_10	tigervnc-1.13.1-10.el8_10.x86_64.rpm