SB2025032899 - Anolis OS update for tigervnc

Description

This security bulletin contains information about 7 secuirty vulnerabilities.

1) Use-after-free (CVE-ID: CVE-2023-5380)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in DestroyWindow. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

2) Race condition (CVE-ID: CVE-2024-0229)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition when reattaching to a different master device. A local user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

3) Heap-based buffer overflow (CVE-ID: CVE-2024-21885)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the XISendDeviceHierarchyEvent() function. A local user can trigger a heap-based buffer overflow and execute arbitrary code on the target system.

4) Heap-based buffer overflow (CVE-ID: CVE-2024-21886)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the DisableDevice() function. A local user can trigger a heap-based buffer overflow and execute arbitrary code on the target system.

5) Heap-based buffer overflow (CVE-ID: CVE-2024-31080)

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a boundary error within the ProcXIGetSelectedEvents() function. A local user can trigger a heap-based buffer overflow and read system memory.

6) Heap-based buffer overflow (CVE-ID: CVE-2024-31081)

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a boundary error within the ProcXIPassiveGrabDevice() function. A local user can trigger a heap-based buffer overflow and read system memory.

7) Use-after-free (CVE-ID: CVE-2024-31083)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ProcRenderAddGlyphs() function. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Remediation

Install update from vendor's website.

References

• https://anas.openanolis.cn/errata/detail/ANSA-2024:0417