CVE-2014-8240
Fixed in a distro release EPSS 4%
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.
Products: tigervnc
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tigervnc | 1.7.0-1 |
| Debian 13 | tigervnc | 1.7.0-1 |
| Debian 14 | tigervnc | 1.7.0-1 |
| Red Hat Enterprise Linux 7 | tigervnc | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-debuginfo | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-icons | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-license | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-applet | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-minimal | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-module | 0:1.3.1-3.el7 |
| openSUSE Tumbleweed | tigervnc | 1.7.0-2.1 |