Read the docs
Red Hat Security Advisory

RHSA-2020:1497

tigervnc security update

Released 2020-04-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 5 records

Priority LOW 39

TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04485 Published 2019-12-26 Partial fix CWE-121
Priority LOW 39

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04485 Published 2019-12-26 Partial fix CWE-122
Priority LOW 39

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04277 Published 2019-12-26 Partial fix CWE-122
Priority LOW 39

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04773 Published 2019-12-26 Partial fix CWE-122