Published: 14/12/2016 Updated: 20/12/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tigervnc tigervnc -
redhat enterprise linux server 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux desktop 7.0
redhat enterprise linux hpc node 7.0

Synopsis Moderate: tigervnc security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic Updated tigervnc packages that fix two security issues, several bugs, andadd various enhancements are now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this upd ...

Debian Bug report logs - #849478 tigervnc: CVE-2014-8241: NULL pointer dereference flaw in XRegion Package: src:tigervnc; Maintainer for src:tigervnc is TigerVNC Packaging Team <pkg-tigervnc-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 27 Dec 2016 16:09:02 UTC Sever ...

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way TigerVNC handled screen sizes A malicious VNC server could use this flaw to cause a client to crash or, potentially, execute arbitrary code on the client A NULL pointer dereference flaw was found in TigerVNC's XRegion A malicious VNC server could use this fla ...

A NULL pointer dereference flaw was found in TigerVNC's XRegion A malicious VNC server could use this flaw to cause a client to crash ...

CWE-476 https://bugzilla.redhat.com/show_bug.cgi?id=1151312 http://seclists.org/oss-sec/2014/q4/300 https://rhn.redhat.com/errata/RHSA-2015-2233.html http://seclists.org/oss-sec/2014/q4/278 http://www.securityfocus.com/bid/70390 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html https://access.redhat.com/errata/RHSA-2015:2233 https://nvd.nist.gov https://alas.aws.amazon.com/ALAS-2015-623.html

CVE-2014-8241

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect