critique
CVE-2026-34352
TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of service via incorrect permissions
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon AlmaLinux (élevée), Oracle (élevée), Rocky Linux (élevée), Red Hat (moyenne), Amazon (moyenne).
Description
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alma 8 | tigervnc, tigervnc-icons, tigervnc-license et 4 autres | 1.15.0-9.el8_10 |
| alma 9 | tigervnc, tigervnc-icons, tigervnc-license et 4 autres | 1.15.0-7.el9_8.1 |
| amazon linux 2 | tigervnc, tigervnc-debuginfo, tigervnc-icons et 5 autres | 1.8.0-24.amzn2.0.8 |
| amazon linux 2023 | tigervnc, tigervnc-debuginfo, tigervnc-debugsource et 9 autres | 1.14.1-3.amzn2023.0.4 |
| debian 11 | tigervnc | pas de correctif indiqué |
| debian 12 | tigervnc | pas de correctif indiqué |
| debian 13 | tigervnc | 1.15.0+dfsg-2.1~deb13u1 |
| debian 14 | tigervnc | 1.15.0+dfsg-2.1 |
| echo | tigervnc | 1.15.0+dfsg-2.1~deb13u1 |
| Oracle Linux 7 | tigervnc, tigervnc-icons, tigervnc-license et 4 autres | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 8 | tigervnc, tigervnc-icons, tigervnc-license et 4 autres | 1.15.0-9.el8_10 |
| Oracle Linux 9 | tigervnc, tigervnc-icons, tigervnc-license et 4 autres | 1.15.0-7.el9_8.1 |
Afficher les 102 entrées de 24 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alma 8 | tigervnc | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-icons | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-license | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-selinux | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-server | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-server-minimal | 1.15.0-9.el8_10 |
| alma 8 | tigervnc-server-module | 1.15.0-9.el8_10 |
| alma 9 | tigervnc | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-icons | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-license | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-selinux | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-server | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-server-minimal | 1.15.0-7.el9_8.1 |
| alma 9 | tigervnc-server-module | 1.15.0-7.el9_8.1 |
| amazon linux 2 | tigervnc | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-debuginfo | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-icons | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-license | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-server | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-server-applet | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-server-minimal | 1.8.0-24.amzn2.0.8 |
| amazon linux 2 | tigervnc-server-module | 1.8.0-24.amzn2.0.8 |
| amazon linux 2023 | tigervnc | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-debuginfo | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-debugsource | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-icons | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-license | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-selinux | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server-debuginfo | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server-minimal | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server-minimal-debuginfo | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server-module | 1.14.1-3.amzn2023.0.4 |
| amazon linux 2023 | tigervnc-server-module-debuginfo | 1.14.1-3.amzn2023.0.4 |
| debian 11 | tigervnc | pas de correctif indiqué |
| debian 12 | tigervnc | pas de correctif indiqué |
| debian 13 | tigervnc | 1.15.0+dfsg-2.1~deb13u1 |
| debian 14 | tigervnc | 1.15.0+dfsg-2.1 |
| echo | tigervnc | 1.15.0+dfsg-2.1~deb13u1 |
| Oracle Linux 7 | tigervnc | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-icons | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-license | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-applet | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-minimal | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 7 | tigervnc-server-module | 1.8.0-33.0.11.el7_9 |
| Oracle Linux 8 | tigervnc | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-icons | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-license | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-selinux | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-server | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-server-minimal | 1.15.0-9.el8_10 |
| Oracle Linux 8 | tigervnc-server-module | 1.15.0-9.el8_10 |
| Oracle Linux 9 | tigervnc | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-icons | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-license | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-selinux | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-server | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-server-minimal | 1.15.0-7.el9_8.1 |
| Oracle Linux 9 | tigervnc-server-module | 1.15.0-7.el9_8.1 |
| rapidfort alpine 3.20 | tigervnc | 1.16.2-r0 |
| rapidfort alpine 3.21 | tigervnc | 1.16.2-r0 |
| rapidfort alpine 3.22 | tigervnc | 1.16.2-r0 |
| rapidfort alpine 3.23 | tigervnc | 1.16.2-r0 |
| rapidfort alpine 3.24 | tigervnc | 1.16.2-r0 |
| rapidfort amazon linux 2023 | tigervnc | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-icons | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-license | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-selinux | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-server | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-server-minimal | 1.14.1-3.amzn2023.0.4 |
| rapidfort amazon linux 2023 | tigervnc-server-module | 1.14.1-3.amzn2023.0.4 |
| rapidfort debian 12 | tigervnc | 0:1.15.0+dfsg-2.1, 0:1.15.0+dfsg-2.1~deb13u1 |
| rapidfort debian 13 | tigervnc | 0:1.15.0+dfsg-2.1, 0:1.15.0+dfsg-2.1~deb13u1 |
| rapidfort fedora 43 | tigervnc | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-icons | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-license | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-selinux | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-server | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-server-minimal | 1.16.2-1.fc43 |
| rapidfort fedora 43 | tigervnc-server-module | 1.16.2-1.fc43 |
| rapidfort Oracle Linux 9 | tigervnc | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-icons | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-license | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-selinux | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-server | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-server-minimal | 0:1.15.0-7.el9_8.1 |
| rapidfort Oracle Linux 9 | tigervnc-server-module | 0:1.15.0-7.el9_8.1 |
| rocky 8 | tigervnc | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-icons | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-license | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-selinux | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-server | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-server-minimal | 1.15.0-9.el8_10 |
| rocky 8 | tigervnc-server-module | 1.15.0-9.el8_10 |
| rocky 9 | tigervnc | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-icons | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-license | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-selinux | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-server | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-server-minimal | 1.15.0-7.el9_8.1 |
| rocky 9 | tigervnc-server-module | 1.15.0-7.el9_8.1 |
Références
- https://access.redhat.com/errata/RHSA-2026:19342
- https://access.redhat.com/security/cve/CVE-2026-34352
- https://bugzilla.redhat.com/2451106
- https://bugzilla.redhat.com/2451107
- https://bugzilla.redhat.com/2451109
- https://bugzilla.redhat.com/2451113
- https://bugzilla.redhat.com/2452022
- https://bugzilla.redhat.com/show_bug.cgi?id=2451106
Les 29 références
- https://bugzilla.redhat.com/show_bug.cgi?id=2451107
- https://bugzilla.redhat.com/show_bug.cgi?id=2451109
- https://bugzilla.redhat.com/show_bug.cgi?id=2451113
- https://bugzilla.redhat.com/show_bug.cgi?id=2452022
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33999
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34000
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34001
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34003
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34352
- https://errata.almalinux.org/9/ALSA-2026-19342.html
- https://errata.rockylinux.org/RLSA-2026:19342
- https://github.com/TigerVNC/tigervnc/commit/0b5cab169d847789efa54459a87659d3fd484393
- https://github.com/TigerVNC/tigervnc/issues/2079
- https://groups.google.com/g/tigervnc-announce/c/anHL9WLshLI
- https://linux.oracle.com/cve/CVE-2026-34352.html
- https://linux.oracle.com/errata/ELSA-2026-22456.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-34352
- https://sourceforge.net/projects/tigervnc/files/stable/1.16.2
- https://www.cve.org/CVERecord?id=CVE-2026-34352
- https://www.openwall.com/lists/oss-security/2026/03/26/7