Red Hat Security Advisory

RHSA-2024:0617

tigervnc security update

Released 2024-01-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v. 8.2) tigervnc-1.9.0-15.el8_2.9, tigervnc-icons-1.9.0-15.el8_2.9, tigervnc-license-1.9.0-15.el8_2.9 +4
Red Hat Enterprise Linux AppStream E4S (v. 8.2) tigervnc-1.9.0-15.el8_2.9, tigervnc-icons-1.9.0-15.el8_2.9, tigervnc-license-1.9.0-15.el8_2.9 +4
Red Hat Enterprise Linux AppStream TUS (v. 8.2) tigervnc-1.9.0-15.el8_2.9, tigervnc-icons-1.9.0-15.el8_2.9, tigervnc-license-1.9.0-15.el8_2.9 +4

TI-2023-06228 CVE-2023-6816 · GHSA-pcjv-393q-rqf2

MEDIUM 46

A flaw was found in X.Org server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02106 Published 2024-01-18 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-787

TI-2024-14548 CVE-2024-21886 · GHSA-vx3h-cj8w-2h2c

MEDIUM 43

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0142 Published 2024-02-28 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-122

TI-2024-14547 CVE-2024-21885 · GHSA-2x93-8973-5mgq

LOW 39

A flaw was found in X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0142 Published 2024-02-28 Partial fix · 21.1.11, 23.2.4 +15 CWE-122

TI-2024-00205 CVE-2024-0229 · GHSA-49wx-9h9f-8c9g

LOW 39

An out-of-bounds memory access flaw was found in the X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01229 Published 2024-02-09 Partial fix · 21.1.11, 1.1.0-25.el6_10.13 +14 CWE-787