Security update for tigervnc SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:1094-1 Final 1 1 2017-04-22T08:13:56Z current 2017-04-22T08:13:56Z 2017-04-22T08:13:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for tigervnc This update for tigervnc provides the several fixes. These security issues were fixed: - CVE-2017-7392, CVE-2017-7396: Client can cause leak in VNC server (bsc#1031886) - CVE-2017-7395: Authenticated VNC client can crash VNC server (bsc#1031877) - CVE-2017-7394: Client can crash or block VNC server (bsc#1031879) - CVE-2017-7393: Authenticated client can cause double free in VNC server (bsc#1031875) - Prevent buffer overflow in VNC client, allowing for crashing the client (bnc#1032880) These non-security issues were fixed: - Prevent client disconnection caused by invalid cursor manipulation. (bsc#1024929, bsc#1031045) - Readd index.vnc. (bsc#1026833) - Crop operations to visible screen. (bnc#1032272) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP2-2017-635,SUSE-SLE-RPI-12-SP2-2017-635,SUSE-SLE-SERVER-12-SP2-2017-635 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20171094-1/ Link for SUSE-SU-2017:1094-1 https://lists.suse.com/pipermail/sle-security-updates/2017-April/002825.html E-Mail link for SUSE-SU-2017:1094-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1024929 SUSE Bug 1024929 https://bugzilla.suse.com/1026833 SUSE Bug 1026833 https://bugzilla.suse.com/1031045 SUSE Bug 1031045 https://bugzilla.suse.com/1031875 SUSE Bug 1031875 https://bugzilla.suse.com/1031877 SUSE Bug 1031877 https://bugzilla.suse.com/1031879 SUSE Bug 1031879 https://bugzilla.suse.com/1031886 SUSE Bug 1031886 https://bugzilla.suse.com/1032272 SUSE Bug 1032272 https://bugzilla.suse.com/1032880 SUSE Bug 1032880 https://www.suse.com/security/cve/CVE-2017-7392/ SUSE CVE CVE-2017-7392 page https://www.suse.com/security/cve/CVE-2017-7393/ SUSE CVE CVE-2017-7393 page https://www.suse.com/security/cve/CVE-2017-7394/ SUSE CVE CVE-2017-7394 page https://www.suse.com/security/cve/CVE-2017-7395/ SUSE CVE CVE-2017-7395 page https://www.suse.com/security/cve/CVE-2017-7396/ SUSE CVE CVE-2017-7396 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 libXvnc1-1.6.0-18.11.1 tigervnc-1.6.0-18.11.1 xorg-x11-Xvnc-1.6.0-18.11.1 libXvnc1-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 tigervnc-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 xorg-x11-Xvnc-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libXvnc1-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Server 12 SP2 tigervnc-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Server 12 SP2 xorg-x11-Xvnc-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Server 12 SP2 libXvnc1-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 tigervnc-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 xorg-x11-Xvnc-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libXvnc1-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 tigervnc-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xorg-x11-Xvnc-1.6.0-18.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server. CVE-2017-7392 SUSE Linux Enterprise Desktop 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Desktop 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Desktop 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171094-1/ https://www.suse.com/security/cve/CVE-2017-7392.html CVE-2017-7392 https://bugzilla.suse.com/1031886 SUSE Bug 1031886 In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution. CVE-2017-7393 SUSE Linux Enterprise Desktop 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Desktop 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Desktop 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 moderate 6 AV:N/AC:M/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171094-1/ https://www.suse.com/security/cve/CVE-2017-7393.html CVE-2017-7393 https://bugzilla.suse.com/1031875 SUSE Bug 1031875 https://bugzilla.suse.com/1031879 SUSE Bug 1031879 In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames. CVE-2017-7394 SUSE Linux Enterprise Desktop 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Desktop 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Desktop 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 moderate 6.3 AV:N/AC:M/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171094-1/ https://www.suse.com/security/cve/CVE-2017-7394.html CVE-2017-7394 https://bugzilla.suse.com/1031879 SUSE Bug 1031879 In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server. CVE-2017-7395 SUSE Linux Enterprise Desktop 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Desktop 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Desktop 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 moderate 6.3 AV:N/AC:M/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171094-1/ https://www.suse.com/security/cve/CVE-2017-7395.html CVE-2017-7395 https://bugzilla.suse.com/1031877 SUSE Bug 1031877 In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server. CVE-2017-7396 SUSE Linux Enterprise Desktop 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Desktop 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Desktop 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libXvnc1-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tigervnc-1.6.0-18.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xorg-x11-Xvnc-1.6.0-18.11.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171094-1/ https://www.suse.com/security/cve/CVE-2017-7396.html CVE-2017-7396 https://bugzilla.suse.com/1031886 SUSE Bug 1031886