Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc | 0:1.9.0-14.el8_1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc-debuginfo | 0:1.9.0-14.el8_1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc-debugsource | 0:1.9.0-14.el8_1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc-icons | 0:1.9.0-14.el8_1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc-license | 0:1.9.0-14.el8_1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc-server | 0:1.9.0-14.el8_1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc-server-applet | 0:1.9.0-14.el8_1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc-server-debuginfo | 0:1.9.0-14.el8_1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc-server-minimal | 0:1.9.0-14.el8_1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc-server-minimal-debuginfo | 0:1.9.0-14.el8_1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc-server-module | 0:1.9.0-14.el8_1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | tigervnc-server-module-debuginfo | 0:1.9.0-14.el8_1 |
Vulnerabilities 5
-
Unscored —
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack …
-
Unscored —
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectD…
-
Unscored —
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. E…
-
Unscored —
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::de…
-
Unscored —
TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::read…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1789527
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1789908
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1790313
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1790315
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1790318
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1497.json
-
report
https://access.redhat.com/security/cve/CVE-2019-15691
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-15691
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-15691
-
report
https://access.redhat.com/security/cve/CVE-2019-15692
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-15692
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-15692
-
report
https://access.redhat.com/security/cve/CVE-2019-15693
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-15693
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-15693
-
report
https://access.redhat.com/security/cve/CVE-2019-15694
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-15694
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-15694
-
report
https://access.redhat.com/security/cve/CVE-2019-15695
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-15695
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-15695