vulnerability
CentOS Linux: CVE-2022-46343: Important: tigervnc security update (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:S/C:C/I:C/A:C) | Dec 14, 2022 | Jan 12, 2023 | Jan 28, 2025 |
Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
Dec 14, 2022
Added
Jan 12, 2023
Modified
Jan 28, 2025
Description
A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
Solutions
centos-upgrade-tigervnccentos-upgrade-tigervnc-debuginfocentos-upgrade-tigervnc-iconscentos-upgrade-tigervnc-licensecentos-upgrade-tigervnc-servercentos-upgrade-tigervnc-server-appletcentos-upgrade-tigervnc-server-minimalcentos-upgrade-tigervnc-server-modulecentos-upgrade-xorg-x11-server-commoncentos-upgrade-xorg-x11-server-debuginfocentos-upgrade-xorg-x11-server-develcentos-upgrade-xorg-x11-server-sourcecentos-upgrade-xorg-x11-server-xdmxcentos-upgrade-xorg-x11-server-xephyrcentos-upgrade-xorg-x11-server-xnestcentos-upgrade-xorg-x11-server-xorgcentos-upgrade-xorg-x11-server-xvfbcentos-upgrade-xorg-x11-server-xwayland
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.