CVE-2014-8241
Fixed in a distro release EPSS 3%
XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052.
Products: tigervnc, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tigervnc | 1.7.0-2 |
| Debian 13 | tigervnc | 1.7.0-2 |
| Debian 14 | tigervnc | 1.7.0-2 |
| Red Hat Enterprise Linux 7 | tigervnc | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-debuginfo | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-icons | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-license | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-applet | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-minimal | 0:1.3.1-3.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-module | 0:1.3.1-3.el7 |