TI-2019-11777 Aliases CVE-2019-15693 GHSA-xv8c-xf4m-4698

Heap-based buffer overflow in Kaspersky TigerVNC

LOW 39CWE-122Published 2019-12-26 · Updated 2024-08-05

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Partial Red Hat: 9 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-122 and the CVSS impact.

Summary

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.

Why it matters now

EPSS 0.04277 91st percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Partial Red Hat: 2 advisoriesRed Hat: 9 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Kaspersky	TigerVNC	1.10.0	—	No fix listed	CNA

TigerVNC VendorKaspersky Affected 1.10.0 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:tigervnc:tigervnc::::::::	before 1.10.1	Vulnerable	TigerVNC

cpe:2.3:a:tigervnc:tigervnc:*:*:*:*:*:*:*:* Versions before 1.10.1 Vulnerable ·TigerVNC

Remediation

Red Hat 2 advisories

RHSA-2020:3875 Released 2020-09-29 · Red Hat rating Moderate
tigervnc security and bug fix update
- Red Hat Enterprise Linux Client (v. 7) tigervnc-1.8.0-21.el7, tigervnc-icons-1.8.0-21.el7, tigervnc-license-1.8.0-21.el7 +2
- Red Hat Enterprise Linux Client Optional (v. 7) tigervnc-server-applet-1.8.0-21.el7, tigervnc-server-module-1.8.0-21.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) tigervnc-1.8.0-21.el7, tigervnc-license-1.8.0-21.el7, tigervnc-server-minimal-1.8.0-21.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) tigervnc-1.8.0-21.el7, tigervnc-icons-1.8.0-21.el7, tigervnc-server-1.8.0-21.el7 +2
- Red Hat Enterprise Linux Server (v. 7) tigervnc-1.8.0-21.el7, tigervnc-icons-1.8.0-21.el7, tigervnc-license-1.8.0-21.el7 +2
- Red Hat Enterprise Linux Server Optional (v. 7) tigervnc-server-applet-1.8.0-21.el7, tigervnc-server-module-1.8.0-21.el7
- Red Hat Enterprise Linux Workstation (v. 7) tigervnc-1.8.0-21.el7, tigervnc-icons-1.8.0-21.el7, tigervnc-license-1.8.0-21.el7 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) tigervnc-server-applet-1.8.0-21.el7, tigervnc-server-module-1.8.0-21.el7
RHSA-2020:1497 Released 2020-04-16 · Red Hat rating Moderate
tigervnc security update
- Red Hat Enterprise Linux AppStream (v. 8) tigervnc-1.9.0-14.el8_1, tigervnc-icons-1.9.0-14.el8_1, tigervnc-license-1.9.0-14.el8_1 +4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Advisory · 2019-12-26
Kaspersky TigerVNC — openSUSE-SU-2020:0087
5 records Highest priority Priority LOW 5 LOW
Other records, highest priority first
- TI-2019-11779 Stack-based buffer overflow in Kaspersky TigerVNCPriority LOW 39
- TI-2019-11778 Heap-based buffer overflow in Kaspersky TigerVNCPriority LOW 39
- TI-2019-11776 Heap-based buffer overflow in Kaspersky TigerVNCPriority LOW 39
Show all 5 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 6	Affected	No fix planned: Out of support scope
Red Hat Enterprise Linux AppStream (v. 8)	Fixed	RHSA-2020:1497
Red Hat Enterprise Linux Client (v. 7)	Fixed	RHSA-2020:3875
Red Hat Enterprise Linux Client Optional (v. 7)	Fixed	RHSA-2020:3875
Red Hat Enterprise Linux ComputeNode (v. 7)	Fixed	RHSA-2020:3875
Red Hat Enterprise Linux ComputeNode Optional (v. 7)	Fixed	RHSA-2020:3875
Red Hat Enterprise Linux Server (v. 7)	Fixed	RHSA-2020:3875
Red Hat Enterprise Linux Server Optional (v. 7)	Fixed	RHSA-2020:3875
Red Hat Enterprise Linux Workstation (v. 7)	Fixed	RHSA-2020:3875
Red Hat Enterprise Linux Workstation Optional (v. 7)	Fixed	RHSA-2020:3875

Timeline

2026-10-02 Threatist record created from CVE-2019-15693
2026-10-03 Alias added: GHSA-xv8c-xf4m-4698

References

Exploit 1

[oss-security] 20191220 VNC vulnerabilities. TigerVNC security update

Patch 1

https://github.com/CendioOssman/tigervnc/commit/b4ada8d0c6dac98c8b91fc64d112569a8ae5fb95

Advisory 2

TI-2012-01284 The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus… CVSS 2.0MEDIUM 4.3
TI-2012-01283 The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus… CVSS 2.0MEDIUM 4.3
TI-2012-01281 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… CVSS 2.0MEDIUM 4.3
TI-2012-01279 The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!… CVSS 2.0MEDIUM 4.3
TI-2012-01278 The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00… CVSS 2.0MEDIUM 4.3
TI-2012-01275 The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky… CVSS 2.0MEDIUM 4.3

See all 76 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences