Multiple vulnerabilities have been discovered in TigerVNC, the worst of which could lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/tigervnc | * | < 1.12.0-r2 | >= 1.12.0-r2 |
TigerVNC is a high-performance VNC server/client.
Multiple vulnerabilities have been discovered in TigerVNC. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All TigerVNC users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/tigervnc-1.12.0-r2"
Multiple vulnerabilities have been found in TigerVNC, the worst of which may lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/tigervnc | * | < 1.8.0 | >= 1.8.0 |
TigerVNC is a high-performance VNC server/client.
Multiple vulnerabilities have been discovered in TigerVNC. Please review the referenced CVE Identifiers for details.
An attacker could execute arbitrary code or cause a Denial of Service condition.
There is no known workaround at this time.
All TigerVNC users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/tigervnc-1.8.0"
A buffer overflow in TigerVNC might allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/tigervnc | * | < 1.7.1 | >= 1.7.1 |
TigerVNC is a high-performance VNC server/client.
A buffer overflow vulnerability in ModifiablePixelBuffer::fillRect in vncviewer was found.
A remote attacker, utilizing a malicious VNC server, could execute arbitrary code with the privileges of the user running the client or cause a Denial of Service condition.
There is no known workaround at this time.
All TigerVNC users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/tigervnc-1.7.1"
An integer overflow in TigerVNC might allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/tigervnc | * | < 1.4.2 | >= 1.4.2 |
TigerVNC is a high-performance VNC server/client.
TigerVNC is impacted by the same vulnerability as found in CVE-2014-6051. An integer overflow, leading to a heap-based buffer overflow, was found in the way screen sizes were handled.
A remote attacker, utilizing a malicious VNC server, could execute arbitrary code with the privileges of the user running the client, or cause a Denial of Service condition.
There is no known workaround at this time.
All TigerVNC users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/tigervnc-1.4.2"
A buffer overflow in TigerVNC could result in execution of arbitrary code or Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/tigervnc | * | < 1.3.1 | >= 1.3.1 |
TigerVNC is a high-performance VNC server/client.
Two boundary errors in TigerVNC could lead to a heap-based buffer overflow.
A remote attacker could entice a user to connect to a malicious VNC server using TigerVNC, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All TigerVNC users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/tigervnc-1.3.1"