Red Hat Security Advisory

RHSA-2025:12751

tigervnc security update

Released 2025-08-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) tigervnc-1.1.0-25.el6_10.13, tigervnc-server-1.1.0-25.el6_10.13
Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) tigervnc-server-applet-1.1.0-25.el6_10.13, tigervnc-server-module-1.1.0-25.el6_10.13

Fixes 18 records

TI-2023-06228 CVE-2023-6816 · GHSA-pcjv-393q-rqf2

Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer

MEDIUM 46

A flaw was found in X.Org server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02106 Published 2024-01-18 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-787

TI-2022-22887 CVE-2022-46343 · GHSA-cfjv-73gp-92j6

Use after free in xorg-x11-server

MEDIUM 45

A vulnerability was found in X.Org.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02556 Published 2022-12-14 Partial fix CWE-416

TI-2022-22885 CVE-2022-46341 · GHSA-cj4x-645f-6pwx

Out-of-bounds write in xorg-x11-server

MEDIUM 45

A vulnerability was found in X.Org.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02717 Published 2022-12-14 Partial fix CWE-787

TI-2022-22884 CVE-2022-46340 · GHSA-hvwj-m4ph-92v4

Out-of-bounds write in xorg-x11-server

MEDIUM 45

A vulnerability was found in X.Org.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02682 Published 2022-12-14 Partial fix CWE-787

TI-2024-14548 CVE-2024-21886 · GHSA-vx3h-cj8w-2h2c

Xorg-x11-server: heap buffer overflow in disabledevice

MEDIUM 43

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0142 Published 2024-02-28 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-122

TI-2023-05938 CVE-2023-6478 · GHSA-fwrj-5c8f-f8h2

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

MEDIUM 43

A flaw was found in xorg-server.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.01617 Published 2023-12-13 Partial fix · 1.1.0-25.el6_10.13, 1.8.0-28.el7_9 +13 CWE-190

TI-2022-22888 CVE-2022-46344 · GHSA-jjf8-5xjq-fq8j

Out-of-bounds read in xorg-x11-server

MEDIUM 43

A vulnerability was found in X.Org.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02899 Published 2022-12-14 Partial fix CWE-125

TI-2022-22886 CVE-2022-46342 · GHSA-5hp7-2mv5-p69r

Use after free in xorg-x11-server

MEDIUM 43

A vulnerability was found in X.Org.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01414 Published 2022-12-14 Partial fix CWE-416

TI-2024-20472 CVE-2024-31083 · GHSA-q6w6-rjjj-5p52

Xorg-x11-server: use-after-free in procrenderaddglyphs

MEDIUM 40

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01859 Published 2024-04-05 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-416

TI-2024-14547 CVE-2024-21885 · GHSA-2x93-8973-5mgq

Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

LOW 39

A flaw was found in X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0142 Published 2024-02-28 Partial fix · 21.1.11, 23.2.4 +15 CWE-122

TI-2024-00205 CVE-2024-0229 · GHSA-49wx-9h9f-8c9g

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

LOW 39

An out-of-bounds memory access flaw was found in the X.Org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01229 Published 2024-02-09 Partial fix · 21.1.11, 1.1.0-25.el6_10.13 +14 CWE-787

TI-2024-08936 CVE-2024-9632 · GHSA-cjcf-6ch6-g3rx

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

LOW 38

A flaw was found in the X.org server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00903 Published 2024-10-30 Partial fix · 21.1.14, 24.1.5-3.el10_0 +15 CWE-122

TI-2023-00468 CVE-2023-0494 · GHSA-5v6x-2hpj-c37x

Use after free in xorg-x11-server

LOW 38

A vulnerability was found in X.Org.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00899 Published 2023-03-27 Partial fix CWE-416

TI-2022-03923 CVE-2022-4283 · GHSA-pchh-rhx4-655j

Use after free in xorg-x11-server

LOW 38

A vulnerability was found in X.Org.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01076 Published 2022-12-14 Partial fix CWE-416

TI-2023-01317 CVE-2023-1393 · GHSA-gvfw-3vr2-x46g

Use after free in xorg-server

LOW 36

A flaw was found in X.Org Server Overlay Window.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00383 Published 2023-03-30 Partial fix CWE-416

TI-2024-20469 CVE-2024-31080 · GHSA-mqqf-4p7r-rf89

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

LOW 35

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00517 Published 2024-04-04 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-126

TI-2023-04938 CVE-2023-5367 · GHSA-q38f-wwqq-rr3v

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

LOW 35

A out-of-bounds write flaw was found in the xorg-x11-server.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00608 Published 2023-10-25 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-24.el7_9 +14 CWE-787

TI-2024-20470 CVE-2024-31081 · GHSA-3fpg-j8cw-vcjq

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

LOW 33

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00517 Published 2024-04-04 Partial fix · 1.1.0-25.el6_10.13, 1.20.4-29.el7_9 +14 CWE-126