Red Hat Security AdvisoryRHSA-2017:2000
tigervnc and fltk security, bug fix, and enhancement update
Released 2017-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) fltk-1.3.4-1.el7, tigervnc-1.8.0-1.el7, tigervnc-icons-1.8.0-1.el7 +3
- Red Hat Enterprise Linux Client Optional (v. 7) fltk-devel-1.3.4-1.el7, fltk-fluid-1.3.4-1.el7, fltk-static-1.3.4-1.el7 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) tigervnc-1.8.0-1.el7, tigervnc-license-1.8.0-1.el7, tigervnc-server-minimal-1.8.0-1.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) fltk-1.3.4-1.el7, fltk-devel-1.3.4-1.el7, fltk-fluid-1.3.4-1.el7 +6
- Red Hat Enterprise Linux Server (v. 7) fltk-1.3.4-1.el7, fltk-1.3.4-1.el7.ppc, tigervnc-1.8.0-1.el7 +4
- Red Hat Enterprise Linux Server Optional (v. 7) fltk-devel-1.3.4-1.el7, fltk-devel-1.3.4-1.el7.ppc, fltk-fluid-1.3.4-1.el7 +4
- Red Hat Enterprise Linux Workstation (v. 7) fltk-1.3.4-1.el7, tigervnc-1.8.0-1.el7, tigervnc-icons-1.8.0-1.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) fltk-devel-1.3.4-1.el7, fltk-fluid-1.3.4-1.el7, fltk-static-1.3.4-1.el7 +2
Fixes 7 records
Priority MEDIUM 49
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04247 · Published 2017-02-28 · Fixed CWE-119
Priority MEDIUM 42
In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0182 · Published 2017-04-01 · Fixed CWE-415
Priority LOW 39
The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03179 · Published 2017-02-28 · Fixed CWE-119
Priority LOW 37
In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02033 · Published 2017-04-01 · Partial fix CWE-772
Priority LOW 36
In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01612 · Published 2017-04-01 · Partial fix CWE-20
Priority LOW 36
In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01719 · Published 2017-04-01 · Partial fix CWE-772
Priority LOW 32
In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01432 · Published 2017-04-01 · Partial fix CWE-190
THREATIST.IORead the docs