Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 477
Alerts This Week
Warning Icon 1 477

Scientific Linux: SLSA-2017:0630-1 Moderate: tigervnc Denial Of Service

Calendar Apr 05, 2017 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory denial of service buffer overflow tigervnc Scientific Linux
Moderate: tigervnc security and bug fix update 
Date: Wed, 5 Apr 2017 15:28:05 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: tigervnc on SL6.x i386/x86_64
MIME-Version: 1.0
Message-ID: <20170405152805.5172.86495@slpackages.fnal.gov>

Synopsis: Moderate: tigervnc security and bug fix update
Advisory ID: SLSA-2017:0630-1
Issue Date: 2017-03-21
CVE Numbers: CVE-2017-5581
 CVE-2016-10207
--

Security Fix(es):

* A denial of service flaw was found in the TigerVNC's Xvnc server. A
remote unauthenticated attacker could use this flaw to make Xvnc crash by
terminating the TLS handshake process early. (CVE-2016-10207)

* A buffer overflow flaw, leading to memory corruption, was found in
TigerVNC viewer. A remote malicious VNC server could use this flaw to
crash the client vncviewer process resulting in denial of service.
(CVE-2017-5581)
--

SL6
 x86_64
 tigervnc-1.1.0-24.el6.x86_64.rpm
 tigervnc-debuginfo-1.1.0-24.el6.x86_64.rpm
 tigervnc-server-1.1.0-24.el6.x86_64.rpm
 tigervnc-server-module-1.1.0-24.el6.x86_64.rpm
 i386
 tigervnc-1.1.0-24.el6.i686.rpm
 tigervnc-debuginfo-1.1.0-24.el6.i686.rpm
 tigervnc-server-1.1.0-24.el6.i686.rpm
 tigervnc-server-module-1.1.0-24.el6.i686.rpm
 noarch
 tigervnc-server-applet-1.1.0-24.el6.noarch.rpm

- Scientific Linux Development Team