tigervnc security update

2024-01-0300:00:00

linux.oracle.com

tigervnc

security update

xorg-x11-server

out-of-bounds write

memory reads

memory writes

cve-2023-5367

cve-2023-6377

cve-2023-6478

unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

Low

0.273 Low

EPSS

Percentile

96.8%

JSON

[1.13.1-3.3]

xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)

OSVersionArchitecturePackageVersionFilename
oracle linux9srctigervnc< 1.13.1-3.el9_3.3tigervnc-1.13.1-3.el9_3.3.src.rpm
oracle linux9aarch64tigervnc< 1.13.1-3.el9_3.3tigervnc-1.13.1-3.el9_3.3.aarch64.rpm
oracle linux9noarchtigervnc-icons< 1.13.1-3.el9_3.3tigervnc-icons-1.13.1-3.el9_3.3.noarch.rpm
oracle linux9noarchtigervnc-license< 1.13.1-3.el9_3.3tigervnc-license-1.13.1-3.el9_3.3.noarch.rpm
oracle linux9noarchtigervnc-selinux< 1.13.1-3.el9_3.3tigervnc-selinux-1.13.1-3.el9_3.3.noarch.rpm
oracle linux9aarch64tigervnc-server< 1.13.1-3.el9_3.3tigervnc-server-1.13.1-3.el9_3.3.aarch64.rpm
oracle linux9aarch64tigervnc-server-minimal< 1.13.1-3.el9_3.3tigervnc-server-minimal-1.13.1-3.el9_3.3.aarch64.rpm
oracle linux9aarch64tigervnc-server-module< 1.13.1-3.el9_3.3tigervnc-server-module-1.13.1-3.el9_3.3.aarch64.rpm
oracle linux9srctigervnc< 1.13.1-3.el9_3.3tigervnc-1.13.1-3.el9_3.3.src.rpm
oracle linux9x86_64tigervnc< 1.13.1-3.el9_3.3tigervnc-1.13.1-3.el9_3.3.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	tigervnc	< 1.13.1-3.el9_3.3	tigervnc-1.13.1-3.el9_3.3.src.rpm
oracle linux	9	aarch64	tigervnc	< 1.13.1-3.el9_3.3	tigervnc-1.13.1-3.el9_3.3.aarch64.rpm
oracle linux	9	noarch	tigervnc-icons	< 1.13.1-3.el9_3.3	tigervnc-icons-1.13.1-3.el9_3.3.noarch.rpm
oracle linux	9	noarch	tigervnc-license	< 1.13.1-3.el9_3.3	tigervnc-license-1.13.1-3.el9_3.3.noarch.rpm
oracle linux	9	noarch	tigervnc-selinux	< 1.13.1-3.el9_3.3	tigervnc-selinux-1.13.1-3.el9_3.3.noarch.rpm
oracle linux	9	aarch64	tigervnc-server	< 1.13.1-3.el9_3.3	tigervnc-server-1.13.1-3.el9_3.3.aarch64.rpm
oracle linux	9	aarch64	tigervnc-server-minimal	< 1.13.1-3.el9_3.3	tigervnc-server-minimal-1.13.1-3.el9_3.3.aarch64.rpm
oracle linux	9	aarch64	tigervnc-server-module	< 1.13.1-3.el9_3.3	tigervnc-server-module-1.13.1-3.el9_3.3.aarch64.rpm
oracle linux	9	src	tigervnc	< 1.13.1-3.el9_3.3	tigervnc-1.13.1-3.el9_3.3.src.rpm
oracle linux	9	x86_64	tigervnc	< 1.13.1-3.el9_3.3	tigervnc-1.13.1-3.el9_3.3.x86_64.rpm