Slackware Linux 15.0 / current tigervnc Multiple Vulnerabilities (SSA:2026-108-01)

The version of tigervnc installed on the remote host is prior to 1.16.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-108-01 advisory. New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

Slackware Linux 15.0 / current tigervnc Vulnerability (SSA:2026-084-02)

The version of tigervnc installed on the remote host is prior to 1.16.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-084-02 advisory. New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

CVE-2019-15694

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs due to the signdness error in processing MemOutStream. Exploitation of this vulnerability could potentially result into remote code execution. This...