ALT Linux Team

Branch p7 update on 2015-11-24

2015-11-24

ALT-BU-2015-2749-1

Branch p7 update bulletin.

ALT-PU-2015-2019-1

Package tigervnc updated to version 1.3.1-alt0.M70P.1 for branch p7 in task 153523.

Closed vulnerabilities

Published: 2020-01-02
Modified: 2024-11-21

CVE-2014-0011

Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and possibly execute arbitrary code via vectors related to screen image rendering.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2014-10-16
Modified: 2024-11-21

CVE-2014-8240

Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.

Severity: HIGH (7.5)
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top