Lucene search
AlmaLinuxALSA-2023:0622HistoryFeb 07, 2023 - 12:00 a.m.
Important: tigervnc security update
2023-02-0700:00:00
errata.almalinux.org
20
vnc
tigervnc
security update
privilege elevation
cvss
xorg-x11-server
deepcopypointerclasses
.
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
51.9%
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients.
Security Fix(es):
- xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | noarch | tigervnc-icons | < 1.12.0-5.el9_1.1 | tigervnc-icons-1.12.0-5.el9_1.1.noarch.rpm |
| almalinux | 9 | noarch | tigervnc-selinux | < 1.12.0-5.el9_1.1 | tigervnc-selinux-1.12.0-5.el9_1.1.noarch.rpm |
| almalinux | 9 | noarch | tigervnc-license | < 1.12.0-5.el9_1.1 | tigervnc-license-1.12.0-5.el9_1.1.noarch.rpm |
| almalinux | 9 | ppc64le | tigervnc | < 1.12.0-5.el9_1.1 | tigervnc-1.12.0-5.el9_1.1.ppc64le.rpm |
| almalinux | 9 | ppc64le | tigervnc-server-module | < 1.12.0-5.el9_1.1 | tigervnc-server-module-1.12.0-5.el9_1.1.ppc64le.rpm |
| almalinux | 9 | ppc64le | tigervnc-server | < 1.12.0-5.el9_1.1 | tigervnc-server-1.12.0-5.el9_1.1.ppc64le.rpm |
| almalinux | 9 | ppc64le | tigervnc-server-minimal | < 1.12.0-5.el9_1.1 | tigervnc-server-minimal-1.12.0-5.el9_1.1.ppc64le.rpm |
| almalinux | 9 | x86_64 | tigervnc-server | < 1.12.0-5.el9_1.1 | tigervnc-server-1.12.0-5.el9_1.1.x86_64.rpm |
| almalinux | 9 | x86_64 | tigervnc | < 1.12.0-5.el9_1.1 | tigervnc-1.12.0-5.el9_1.1.x86_64.rpm |
| almalinux | 9 | x86_64 | tigervnc-server-minimal | < 1.12.0-5.el9_1.1 | tigervnc-server-minimal-1.12.0-5.el9_1.1.x86_64.rpm |
Related
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xorg-x11-server (SUSE-SU-2023:0288-1)
2023-02-08 00:00:00
RHEL 8 : tigervnc (RHSA-2023:0664)
2023-02-08 00:00:00
RHEL 8 : tigervnc (RHSA-2023:0665)
2023-02-08 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0118)
2023-03-31 00:00:00
Fedora: Security Advisory for xorg-x11-server (FEDORA-2023-d33a0f8471)
2023-02-13 00:00:00
amazon
amazon
Important: tigervnc
2024-05-23 22:04:00
Important: xorg-x11-server
2023-03-17 15:53:00
Important: xorg-x11-server
2023-03-02 22:35:00
centos
centos
tigervnc, xorg security update
2023-02-20 16:16:26
osv
osv
Important: tigervnc security update
2023-02-08 00:00:00
Important: tigervnc security update
2023-02-16 06:36:03
CVE-2023-0494
2023-03-27 21:15:10
redhat
redhat
(RHSA-2023:0671) Important: tigervnc security update
2023-02-08 15:24:29
(RHSA-2023:0675) Important: tigervnc and xorg-x11-server security update
2023-02-08 19:38:55
(RHSA-2023:0622) Important: tigervnc security update
2023-02-07 15:17:04
altlinux
altlinux
Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt7
2023-02-15 00:00:00
rocky
rocky
tigervnc security update
2023-02-16 06:36:03
tigervnc security update
2023-02-16 06:35:13
redhatcve
redhatcve
CVE-2023-0494
2023-02-07 04:26:37
freebsd
freebsd
xorg-server -- Security issue in the X server
2023-02-07 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: xorg-x11-server-Xwayland-22.1.8-1.fc37
2023-02-12 00:44:45
[SECURITY] Fedora 37 Update: tigervnc-1.13.0-1.fc37
2023-02-13 00:45:02
[SECURITY] Fedora 36 Update: tigervnc-1.13.1-1.fc36
2023-03-18 05:03:13
debian
debian
[SECURITY] [DSA 5342-1] xorg-server security update
2023-02-07 15:48:26
[SECURITY] [DLA 3310-1] xorg-server security update
2023-02-07 07:27:41
veracode
veracode
Use After Free
2023-02-11 05:09:41
alpinelinux
alpinelinux
CVE-2023-0494
2023-03-27 21:15:10
almalinux
almalinux
Important: tigervnc security update
2023-02-08 00:00:00
Moderate: xorg-x11-server-Xwayland security update
2023-05-09 00:00:00
Moderate: xorg-x11-server-Xwayland security update
2023-05-16 00:00:00
zdi
zdi
redos
redos
ROS-20230210-02
2023-02-10 00:00:00
nvd
nvd
CVE-2023-0494
2023-03-27 21:15:10
prion
prion
Design/Logic Flaw
2023-03-27 21:15:00
mageia
mageia
Updated tigervnc/x11-server packages fix security vulnerability
2023-03-31 03:13:46
cvelist
cvelist
CVE-2023-0494
2023-03-27 00:00:00
ubuntu
ubuntu
X.Org X Server vulnerability
2023-02-07 00:00:00
X.Org X Server vulnerabilities
2023-02-16 00:00:00
slackware
slackware
[slackware-security] xorg-server
2023-02-07 20:58:17
[slackware-security] tigervnc
2023-11-13 19:27:10
cve
cve
CVE-2023-0494
2023-03-27 21:15:10
oraclelinux
oraclelinux
tigervnc security update
2023-02-08 00:00:00
tigervnc security update
2023-02-08 00:00:00
tigervnc and xorg-x11-server security update
2023-02-09 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2126
2023-02-28 10:19:45
Advisory ROSA-SA-2023-2125
2023-02-28 10:13:13
debiancve
debiancve
CVE-2023-0494
2023-03-27 21:15:10
ubuntucve
ubuntucve
CVE-2023-0494
2023-02-07 00:00:00
gentoo
gentoo
X.Org X server, XWayland: Multiple Vulnerabilities
2023-05-30 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
51.9%
Related for ALSA-2023:0622