Red Hat Security Advisory

RHSA-2024:2080

tigervnc security update

Released 2024-04-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-license-1.8.0-33.el7_9 +2
Red Hat Enterprise Linux Client Optional (v. 7) tigervnc-server-applet-1.8.0-33.el7_9, tigervnc-server-module-1.8.0-33.el7_9
Red Hat Enterprise Linux ComputeNode Optional (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-server-1.8.0-33.el7_9 +2
Red Hat Enterprise Linux Server (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-license-1.8.0-33.el7_9 +2
Red Hat Enterprise Linux Server Optional (v. 7) tigervnc-server-applet-1.8.0-33.el7_9, tigervnc-server-module-1.8.0-33.el7_9
Red Hat Enterprise Linux Workstation (v. 7) tigervnc-1.8.0-33.el7_9, tigervnc-icons-1.8.0-33.el7_9, tigervnc-license-1.8.0-33.el7_9 +2
Red Hat Enterprise Linux Workstation Optional (v. 7) tigervnc-server-applet-1.8.0-33.el7_9, tigervnc-server-module-1.8.0-33.el7_9

TI-2024-20472 CVE-2024-31083 · GHSA-q6w6-rjjj-5p52

MEDIUM 40

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01859 Published 2024-04-05 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-416

TI-2024-20469 CVE-2024-31080 · GHSA-mqqf-4p7r-rf89

LOW 35

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00517 Published 2024-04-04 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-126

TI-2024-20470 CVE-2024-31081 · GHSA-3fpg-j8cw-vcjq

LOW 33

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00517 Published 2024-04-04 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-126