Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Fedora 25 tigervnc Security Update: Critical Remote Display Issues

fedora
Calendar Grey April 7, 2017
Scroller Fedora
Crucial security patches for TigerVNC in Fedora 25 targeting severe remote visualization flaws.
Security fix for CVE-2017-7392 CVE-2017-7393 CVE-2017-7394 CVE-2017-7395 CVE-2017-7396.

Summary

Virtual Network Computing (VNC) is a remote display system which

allows you to view a computing 'desktop' environment not only on the

machine where it is running, but from anywhere on the Internet and

from a wide variety of machine architectures. This package contains a

client which will allow you to connect to other desktops running a VNC

server.

Update Information:

Security fix for CVE-2017-7392 CVE-2017-7393 CVE-2017-7394 CVE-2017-7395 CVE-2017-7396.

Topics%20covered

Topics Covered

security advisory critical Fedora memory leak integer overflow remote display tigervnc

Change Log

References


[ 1 ] Bug #1438703 - CVE-2017-7396 tigervnc: SecurityServer and ClientServer memory leaks https://bugzilla.redhat.com/show_bug.cgi?id=1438703 [ 2 ] Bug #1438701 - CVE-2017-7395 tigervnc: Integer overflow in SMsgReader::readClientCutText https://bugzilla.redhat.com/show_bug.cgi?id=1438701 [ 3 ] Bug #1438700 - CVE-2017-7394 tigervnc: Server crash via long usernames https://bugzilla.redhat.com/show_bug.cgi?id=1438700 [ 4 ] Bug #1438697 - CVE-2017-7393 tigervnc: Double free via crafted fences https://bugzilla.redhat.com/show_bug.cgi?id=1438697 [ 5 ] Bug #1438694 - CVE-2017-7392 tigervnc: SSecurityVeNCrypt memory leak https://bugzilla.redhat.com/show_bug.cgi?id=1438694

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade tigervnc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: tigervnc
Product: Fedora 25
Version: 1.7.1
Release: 3.fc25
URL: https://tigervnc.org/
Summary: A TigerVNC remote display system

Topics%20covered

Topics Covered

security advisory critical Fedora memory leak integer overflow remote display tigervnc

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.