Test ID:	1.3.6.1.4.1.25623.1.1.10.2020.0042
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2020-0042)
Summary:	The remote host is missing an update for the 'tigervnc' package(s) announced via the MGASA-2020-0042 advisory.
Description:	Summary: The remote host is missing an update for the 'tigervnc' package(s) announced via the MGASA-2020-0042 advisory. Vulnerability Insight: Updated tigervnc packages fix security vulnerabilities: The tigervnc package has been updated to version 1.10.1 to fix multiple unspecified security issues. These issues affect both the client and server and could theoretically allow an malicious peer to take control over the software on the other side. No working exploit is known at this time, and the issues require the peer to first be authenticated (CVE-2019-15691, CVE-2019-15692, CVE-2019-15693, CVE-2019-15694, CVE-2019-15695). Affected Software/OS: 'tigervnc' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-15691 https://github.com/CendioOssman/tigervnc/commit/d61a767d6842b530ffb532ddd5a3d233119aad40 https://github.com/TigerVNC/tigervnc/releases/tag/v1.10.1 https://www.openwall.com/lists/oss-security/2019/12/20/2 SuSE Security Announcement: openSUSE-SU-2020:0087 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00039.html Common Vulnerability Exposure (CVE) ID: CVE-2019-15692 https://github.com/CendioOssman/tigervnc/commit/996356b6c65ca165ee1ea46a571c32a1dc3c3821 Common Vulnerability Exposure (CVE) ID: CVE-2019-15693 https://github.com/CendioOssman/tigervnc/commit/b4ada8d0c6dac98c8b91fc64d112569a8ae5fb95 Common Vulnerability Exposure (CVE) ID: CVE-2019-15694 https://github.com/CendioOssman/tigervnc/commit/0943c006c7d900dfc0281639e992791d6c567438 Common Vulnerability Exposure (CVE) ID: CVE-2019-15695 https://github.com/CendioOssman/tigervnc/commit/05e28490873a861379c943bf616614b78b558b89
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.