Red Hat Security AdvisoryRHSA-2025:2880
tigervnc security update
Released 2025-03-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) tigervnc-1.12.0-6.el8_6.13, tigervnc-icons-1.12.0-6.el8_6.13, tigervnc-license-1.12.0-6.el8_6.13 +4
- Red Hat Enterprise Linux AppStream E4S (v.8.6) tigervnc-1.12.0-6.el8_6.13, tigervnc-icons-1.12.0-6.el8_6.13, tigervnc-license-1.12.0-6.el8_6.13 +4
- Red Hat Enterprise Linux AppStream TUS (v.8.6) tigervnc-1.12.0-6.el8_6.13, tigervnc-icons-1.12.0-6.el8_6.13, tigervnc-license-1.12.0-6.el8_6.13 +4
Fixes 8 records
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416
Priority LOW 36
An access to an uninitialized pointer flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00405 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-824
Priority LOW 36
An out-of-bounds write flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00405 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-787
Priority LOW 36
A buffer overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00444 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-119
Priority LOW 36
A heap overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-787
Priority LOW 36
A buffer overflow flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00438 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-121
Priority LOW 36
A use-after-free flaw was found in X.Org and Xwayland.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2025-02-25 · Partial fix · 21.1.16, 24.1.6 +15 CWE-416