Red Hat Security Advisory: tigervnc security and bug fix update

Fixed packages 32

Vulnerabilities 5

• Unscored —
  CVE-2019-15691

  TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack …

  Kaspersky TigerVNC tigervnc tigervnc Debian Ubuntu
  Dec 26, 2019
• Unscored —
  CVE-2019-15692

  TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectD…

  Kaspersky TigerVNC tigervnc tigervnc Debian Ubuntu
  Dec 26, 2019
• Unscored —
  CVE-2019-15693

  TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. E…

  Kaspersky TigerVNC tigervnc tigervnc Debian Ubuntu
  Dec 26, 2019
• Unscored —
  CVE-2019-15694

  TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::de…

  Kaspersky TigerVNC tigervnc tigervnc Debian Ubuntu
  Dec 26, 2019
• Unscored —
  CVE-2019-15695

  TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::read…

  Kaspersky TigerVNC tigervnc tigervnc Debian Ubuntu
  Dec 26, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1789527
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1789908
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790313
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790315
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1790318
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1791996
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1826822
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3875.json
• report
  https://access.redhat.com/security/cve/CVE-2019-15691
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15691
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15691
• report
  https://access.redhat.com/security/cve/CVE-2019-15692
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15692
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15692
• report
  https://access.redhat.com/security/cve/CVE-2019-15693
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15693
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15693
• report
  https://access.redhat.com/security/cve/CVE-2019-15694
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15694
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15694
• report
  https://access.redhat.com/security/cve/CVE-2019-15695
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-15695
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-15695