Skip to content
OpenAdvisories
Medium ELSA-2017-2000 7 CVEs

Moderate: tigervnc and fltk security, bug fix, and enhancement update (Oracle Linux 7)

Published Aug 7, 2017 · Updated Aug 7, 2017

Ecosystem: Oracle Linux

Summary

fltk
[1.3.4-1]
- Re-base to 1.3.4 (+ sync with Fedora)

tigervnc
[1.8.0-1]
- Update to 1.8.0
Resolves: bz#1388620

[1.7.90-2]
- Make RandR callbacks optional
Resolves: bz#1444948

[1.7.90-1]
- Update to 1.7.90
Resolves: bz#1388620

[1.7.1-3]
- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
Resolves: bz#1439127
Prevent double free by crafted fences [CVE-2017-7393]
Resolves: bz#1439134

[1.7.1-2]
- Be more restrictive with shared memory mode bits
Resolves: bz#1152552
Limit max username/password size in SSecurityPlain [CVE-2017-7394]
Resolves: bz#1438737
Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
Resolves: bz#1438742

[1.7.1-1]
- Update to 1.7.1
Resolves: bz#1388620
Resolves: bz#1343899
Resolves: bz#1410164
Resolves: bz#1415547
Resolves: bz#1418945
Resolves: bz#1416290
Resolves: bz#1342956
- Fix shared memory leakage
Resolves: bz#1358090
- Added systemd unit file for xvnc
Resolves: bz#1393971

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 fltk 0:1.3.4-1.el7
Oracle Linux · 7 fltk-devel 0:1.3.4-1.el7
Oracle Linux · 7 fltk-fluid 0:1.3.4-1.el7
Oracle Linux · 7 fltk-static 0:1.3.4-1.el7
Oracle Linux · 7 tigervnc 0:1.8.0-1.el7
Oracle Linux · 7 tigervnc-icons 0:1.8.0-1.el7
Oracle Linux · 7 tigervnc-license 0:1.8.0-1.el7
Oracle Linux · 7 tigervnc-server 0:1.8.0-1.el7
Oracle Linux · 7 tigervnc-server-applet 0:1.8.0-1.el7
Oracle Linux · 7 tigervnc-server-minimal 0:1.8.0-1.el7
Oracle Linux · 7 tigervnc-server-module 0:1.8.0-1.el7

Vulnerabilities 7

  • Unscored —
    CVE-2016-10207

    The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by t…

    tigervnc Debian
  • Unscored —
    CVE-2017-5581

    Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execu…

    tigervnc Debian
  • Unscored —
    CVE-2017-7392

    In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a s…

    tigervnc Debian
  • Unscored —
    CVE-2017-7393

    In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, lead…

    tigervnc Debian
  • Unscored —
    CVE-2017-7394

    In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sendin…

    tigervnc Debian
  • Unscored —
    CVE-2017-7395

    In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated clie…

    tigervnc Debian
  • Unscored —
    CVE-2017-7396

    In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak i…

    tigervnc Debian