Lucene search
Veracode Vulnerability DatabaseVERACODE:27392HistoryOct 01, 2020 - 3:52 a.m.
Heap Buffer Overflow
2020-10-0103:52:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.003 Low
EPSS
Percentile
68.5%
tigervnc is vulnerable to heap buffer overflow triggered from CopyRectDecoder due to incorrect value checks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tigervnc | eq | 1.8.0__17.el7 | |
| tigervnc | eq | 1.8.0__19.el7 | |
| tigervnc | eq | 1.8.0__13.el7 | |
| tigervnc | eq | 1.8.0__17.el7 | |
| tigervnc | eq | 1.8.0__19.el7 | |
| tigervnc | eq | 1.8.0__13.el7 |
References
lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index
access.redhat.com/errata/RHSA-2020:3875
access.redhat.com/security/updates/classification/#moderate
github.com/CendioOssman/tigervnc/commit/996356b6c65ca165ee1ea46a571c32a1dc3c3821
github.com/TigerVNC/tigervnc/releases/tag/v1.10.1
www.openwall.com/lists/oss-security/2019/12/20/2
Related
debiancve
debiancve
CVE-2019-15692
2019-12-26 15:15:11
redhatcve
redhatcve
CVE-2019-15692
2020-01-09 18:38:59
cvelist
cvelist
CVE-2019-15692
2019-12-26 14:55:47
ubuntucve
ubuntucve
CVE-2019-15692
2019-12-26 00:00:00
osv
osv
CVE-2019-15692
2019-12-26 15:15:11
nvd
nvd
CVE-2019-15692
2019-12-26 15:15:11
cve
cve
CVE-2019-15692
2019-12-26 15:15:11
prion
prion
Heap overflow
2019-12-26 15:15:00
openvas
openvas
openSUSE: Security Advisory for tigervnc (openSUSE-SU-2020:0087_1)
2020-01-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:1749-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0159-1)
2021-04-19 00:00:00
nessus
nessus
Amazon Linux AMI : tigervnc (ALAS-2020-1470) (deprecated)
2020-12-19 00:00:00
Oracle Linux 8 : tigervnc (ELSA-2020-1497)
2020-04-20 00:00:00
CentOS 7 : tigervnc (CESA-2020:3875)
2020-10-20 00:00:00
amazon
amazon
Medium: tigervnc
2020-12-16 20:51:00
Low: tigervnc
2020-10-22 18:47:00
Medium: tigervnc
2021-01-12 22:52:00
mageia
mageia
Updated tigervnc packages fix security vulnerabilities
2020-01-19 13:11:05
oraclelinux
oraclelinux
tigervnc security update
2020-04-18 00:00:00
tigervnc security and bug fix update
2020-10-06 00:00:00
redhat
redhat
(RHSA-2020:3875) Moderate: tigervnc security and bug fix update
2020-09-29 07:39:39
(RHSA-2020:1497) Moderate: tigervnc security update
2020-04-16 20:09:52
suse
suse
Security update for tigervnc (important)
2020-01-21 00:00:00
centos
centos
tigervnc security update
2020-10-20 19:03:46
gentoo
gentoo
TigerVNC: Multiple Vulnerabilities
2024-07-05 00:00:00