crítica
CVE-2026-34352
TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según AlmaLinux (alta), Oracle (alta), Rocky Linux (alta), Red Hat (media), Amazon (media).
Descripción
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | tigervnc, tigervnc-icons, tigervnc-license y 4 más | 1.15.0-9.el8_10 |
| alma 9 | tigervnc, tigervnc-icons, tigervnc-license y 4 más | 1.15.0-7.el9_8.1 |
| amazon linux 2 | tigervnc, tigervnc-debuginfo, tigervnc-icons y 5 más | 1.8.0-24.amzn2.0.8 |
| amazon linux 2023 | tigervnc, tigervnc-debuginfo, tigervnc-debugsource y 9 más | 1.14.1-3.amzn2023.0.4 |
| debian 11 | tigervnc | sin corrección indicada |
| debian 12 | tigervnc | sin corrección indicada |
| debian 13 | tigervnc | 1.15.0+dfsg-2.1~deb13u1 |
| debian 14 | tigervnc | 1.15.0+dfsg-2.1 |
| echo | tigervnc | 1.15.0+dfsg-2.1~deb13u1 |
| Oracle Linux 7 | tigervnc, tigervnc-icons, tigervnc-license y 4 más | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 8 | tigervnc, tigervnc-icons, tigervnc-license y 4 más | 1.15.0-9.el8_10 |
| Oracle Linux 9 | tigervnc, tigervnc-icons, tigervnc-license y 4 más | 1.15.0-7.el9_8.1 |
Mostrar las 102 entradas de 24 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | tigervnc | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-icons | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-license | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-selinux | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-server | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-server-minimal | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-server-module | 1.15.0-9.el8_10 |
| alma 9 | tigervnc | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-icons | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-license | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-selinux | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-server | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-server-minimal | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-server-module | 1.15.0-7.el9_8.1 |
| amazon linux 2 | tigervnc | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-debuginfo | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-icons | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-license | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-server | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-server-applet | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-server-minimal | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-server-module | 1.8.0-24.amzn2.0.8 |
| amazon linux 2023 | tigervnc | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-debuginfo | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-debugsource | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-icons | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-license | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-selinux | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server-debuginfo | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server-minimal | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server-minimal-debuginfo | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server-module | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server-module-debuginfo | 1.14.1-3.amzn2023.0.4 |
| debian 11 | tigervnc | sin corrección indicada |
| debian 12 | tigervnc | sin corrección indicada |
| debian 13 | tigervnc | 1.15.0+dfsg-2.1~deb13u1 |
| debian 14 | tigervnc | 1.15.0+dfsg-2.1 |
| echo | tigervnc | 1.15.0+dfsg-2.1~deb13u1 |
| Oracle Linux 7 | tigervnc | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-icons | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-license | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-applet | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-minimal | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-module | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 8 | tigervnc | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-icons | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-license | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-selinux | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-server | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-server-minimal | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-server-module | 1.15.0-9.el8_10 |
| Oracle Linux 9 | tigervnc | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-icons | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-license | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-selinux | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-server | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-server-minimal | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-server-module | 1.15.0-7.el9_8.1 |
| rapidfort alpine 3.20 | tigervnc | 1.16.2-r0 |
| rapidfort alpine 3.21 | tigervnc | 1.16.2-r0 |
| rapidfort alpine 3.22 | tigervnc | 1.16.2-r0 |
| rapidfort alpine 3.23 | tigervnc | 1.16.2-r0 |
| rapidfort alpine 3.24 | tigervnc | 1.16.2-r0 |
| rapidfort amazon linux 2023 | tigervnc | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-icons | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-license | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-selinux | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-server | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-server-minimal | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-server-module | 1.14.1-3.amzn2023.0.4 |
| rapidfort debian 12 | tigervnc | 0:1.15.0+dfsg-2.1, 0:1.15.0+dfsg-2.1~deb13u1 |
| rapidfort debian 13 | tigervnc | 0:1.15.0+dfsg-2.1, 0:1.15.0+dfsg-2.1~deb13u1 |
| rapidfort fedora 43 | tigervnc | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-icons | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-license | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-selinux | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-server | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-server-minimal | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-server-module | 1.16.2-1.fc43 |
| rapidfort Oracle Linux 9 | tigervnc | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-icons | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-license | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-selinux | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-server | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-server-minimal | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-server-module | 0:1.15.0-7.el9_8.1 |
| rocky 8 | tigervnc | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-icons | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-license | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-selinux | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-server | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-server-minimal | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-server-module | 1.15.0-9.el8_10 |
| rocky 9 | tigervnc | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-icons | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-license | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-selinux | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-server | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-server-minimal | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-server-module | 1.15.0-7.el9_8.1 |
Referencias
- https://access.redhat.com/errata/RHSA-2026:19342
- https://access.redhat.com/security/cve/CVE-2026-34352
- https://bugzilla.redhat.com/2451106
- https://bugzilla.redhat.com/2451107
- https://bugzilla.redhat.com/2451109
- https://bugzilla.redhat.com/2451113
- https://bugzilla.redhat.com/2452022
- https://bugzilla.redhat.com/show_bug.cgi?id=2451106
Las 29 referencias
- https://bugzilla.redhat.com/show_bug.cgi?id=2451107
- https://bugzilla.redhat.com/show_bug.cgi?id=2451109
- https://bugzilla.redhat.com/show_bug.cgi?id=2451113
- https://bugzilla.redhat.com/show_bug.cgi?id=2452022
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33999
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34000
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34001
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34003
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34352
- https://errata.almalinux.org/9/ALSA-2026-19342.html
- https://errata.rockylinux.org/RLSA-2026:19342
- https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393
- https://github.com/TigerVNC/tigervnc/issues/2079
- https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI
- https://linux.oracle.com/cve/CVE-2026-34352.html
- https://linux.oracle.com/errata/ELSA-2026-22456.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-34352
- https://sourceforge.net/projects/tigervnc/files/stable/1.16.2
- https://www.cve.org/CVERecord?id=CVE-2026-34352
- https://www.openwall.com/lists/oss-security/2026/03/26/7