gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gtk-vnc | Aug 30, 2017 | Feb 28, 2017 |
| Centos_linux | — | Upgrade gtk-vnc-pythonUpgrade gtk-vnc2-develUpgrade gtk-vncUpgrade gtk-vnc2Upgrade gvnc-develUpgrade gvncpulse-develUpgrade gvncpulseUpgrade gtk-vnc-debuginfoUpgrade gvnc-toolsUpgrade gvncUpgrade gtk-vnc-devel | Aug 28, 2019 | Feb 28, 2017 |
| Debian | — | Upgrade gtk-vnc | Mar 31, 2017 | Feb 9, 2017 |
| Freebsd | — | Upgrade gtk-vnc | Feb 12, 2017 | Feb 11, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gtk-vnc2 | Nov 30, 2017 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gtk-vnc2 | Nov 30, 2017 | Feb 28, 2017 |
| Oracle Solaris | — | Upgrade library/desktop/gtk-vnc to version 0.7.0-0.175.3.29.0.2.0 on Solaris 11.3 | Feb 22, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade gtk-vnc2Upgrade gtk-vnc-pythonUpgrade gtk-vnc-develUpgrade gvncUpgrade gvncpulse-develUpgrade gtk-vncUpgrade gtk-vnc2-develUpgrade gvnc-develUpgrade gvncpulseUpgrade gvnc-tools | Aug 8, 2017 | Feb 1, 2017 |
| Redhat_linux | — | Upgrade gvncpulseUpgrade gvncUpgrade gtk-vncUpgrade gvnc-toolsUpgrade gvncpulse-develUpgrade gtk-vnc2Upgrade gtk-vnc-develUpgrade gtk-vnc2-develUpgrade gtk-vnc-debuginfoNo solution existsUpgrade gtk-vnc-pythonUpgrade gvnc-devel | Aug 3, 2017 | Feb 9, 2017 |
| Suse | — | Upgrade gtk-vnc2-develUpgrade gtk-vnc-langUpgrade libgvncpulse-1_0-0Upgrade libgvnc-1_0-0Upgrade python-gtk-vncUpgrade typelib-1_0-GVncPulse-1_0Upgrade libgtk-vnc-2_0-0Upgrade typelib-1_0-GtkVnc-1_0Upgrade typelib-1_0-GtkVnc-2_0Upgrade typelib-1_0-GVnc-1_0Upgrade libgtk-vnc-1_0-0Upgrade gtk-vnc-devel | May 20, 2018 | Feb 9, 2017 |
| Ubuntu | — | Upgrade libgvnc-1.0-0Upgrade libgtk-vnc-2.0-0Upgrade libgtk-vnc-1.0-0 | Feb 21, 2017 | Feb 9, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub