The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:0045 advisory.

  - xorg-x11-server: X.Org Server XkbGetKbdByName use-after-free (CVE-2022-4283)

  - xorg-x11-server: X.Org Server XTestSwapFakeInput stack overflow (CVE-2022-46340)

  - xorg-x11-server: X.Org Server XIPassiveUngrab out-of-bounds access (CVE-2022-46341)

  - xorg-x11-server: X.Org Server XvdiSelectVideoNotify use-after-free (CVE-2022-46342)

  - xorg-x11-server: X.Org Server ScreenSaverSetAttributes use-after-free (CVE-2022-46343)

  - xorg-x11-server: X.Org Server XIChangeProperty out-of-bounds access (CVE-2022-46344)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

CentOS 7 : tigervnc (CESA-2023:0045)

high Nessus Plugin ID 170863

Version 1.0