Advisory ROSA-SA-2024-2325

Software: tigervnc 1.8.0
OS: rosa-server79

package_evr_string: tigervnc-1.8.0-28.res7

CVE-ID: CVE-2023-5367
BDU-ID: 2023-07145
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the X Window System Xorg-server XIChangeDeviceProperty (Xi/xiproperty.c) and RRChangeOutputProperty (randr/rrrproperty.c) functions is related to the ability to write beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service or escalate their privileges
CVE-STATUS: Fixed
CVE-REV: Run the yum update tigervnc command to close it.

CVE-ID: CVE-2023-5380
BDU-ID: 2023-07412
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the DestroyWindow function of the xorg-x11-server package is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker to cause a denial of service
CVE-STATUS: Fixed
CVE-REV: Run yum update tigervnc to close it