Red Hat Security Advisory: tigervnc security update

Fixed packages 5

Vulnerabilities 18

• Critical 9.8
  CVE-2023-6816

  Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer

  A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device'…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Jan 18, 2024
• High 8.8
  CVE-2022-46340

  A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request o…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server-hwe-18.04 Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022
• High 8.8
  CVE-2022-46341

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request acces…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server-hwe-18.04 Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022
• High 8.8
  CVE-2022-46342

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server-hwe-18.04 Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022
• High 8.8
  CVE-2022-46343

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes requ…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server-hwe-18.04 Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022
• High 7.8
  CVE-2022-4283

  A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server-hwe-18.04 Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022
• High 7.8
  CVE-2023-0494

  A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be e…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server-hwe-18.04 Debian Ubuntu Alpine
  Mar 27, 2023
• High 7.8
  CVE-2023-1393

  A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client e…

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server-hwe-18.04 Debian Ubuntu Azure Linux
  Mar 30, 2023
• High 7.8
  CVE-2023-5367

  Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

  A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty func…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Oct 25, 2023
• High 7.8
  CVE-2024-0229

  Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

  An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the serv…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 9, 2024
• High 7.8
  CVE-2024-21885

  Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

  A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which ma…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 28, 2024
• High 7.8
  CVE-2024-21886

  Xorg-x11-server: heap buffer overflow in disabledevice

  A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 28, 2024
• High 7.8
  CVE-2024-31083

  Xorg-x11-server: use-after-free in procrenderaddglyphs

  A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 5, 2024
• High 7.8
  CVE-2024-9632

  Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

  A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalatio…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Oct 30, 2024
• High 7.6
  CVE-2023-6478

  Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

  A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Dec 13, 2023
• High 7.3
  CVE-2024-31080

  Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

  A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 4, 2024
• High 7.3
  CVE-2024-31081

  Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

  A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 4, 2024
• Unscored —
  CVE-2022-46344

  A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has …

  xorg-server xorg-server xorg-server-hwe-16.04 xorg-server-hwe-18.04 Debian Ubuntu Azure Linux Alpine
  Dec 14, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151755
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151756
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151757
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151758
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151760
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151761
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2165995
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2180288
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2243091
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2253298
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2256540
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2256542
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2256690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2257691
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2271997
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2271998
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2272000
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2317233
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12751.json
• report
  https://access.redhat.com/security/cve/CVE-2022-4283
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-4283
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-4283
• report
  https://access.redhat.com/security/cve/CVE-2022-46340
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46340
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46340
• report
  https://access.redhat.com/security/cve/CVE-2022-46341
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46341
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46341
• report
  https://access.redhat.com/security/cve/CVE-2022-46342
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46342
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46342
• report
  https://access.redhat.com/security/cve/CVE-2022-46343
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46343
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46343
• report
  https://access.redhat.com/security/cve/CVE-2022-46344
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46344
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46344
• report
  https://access.redhat.com/security/cve/CVE-2023-0494