The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tigervnc | Sep 1, 2017 | Feb 11, 2017 |
| Centos_linux | — | Upgrade fltk-debuginfoUpgrade fltk-fluidUpgrade tigervnc-licenseUpgrade fltkUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade tigervnc-iconsUpgrade tigervnc-server-appletUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade fltk-develUpgrade fltk-static | Aug 28, 2019 | Feb 28, 2017 |
| Debian | — | Upgrade tigervnc | Jul 30, 2024 | Feb 28, 2017 |
| Gentoo Linux | — | Upgrade net-misc/tigervnc. | Jan 12, 2018 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc | Nov 30, 2017 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervncUpgrade tigervnc-license | Nov 30, 2017 | Feb 28, 2017 |
| Oracle Solaris | — | Upgrade x11/server/xvnc to version 1.1.0-0.175.3.28.0.2.1543 on Solaris 11.3 | Feb 6, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade fltkUpgrade tigervnc-licenseUpgrade tigervnc-server-appletUpgrade tigervncUpgrade fltk-fluidUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade fltk-develUpgrade tigervnc-server-minimalUpgrade fltk-static | Mar 28, 2017 | Aug 23, 2016 |
| Redhat_linux | — | Upgrade fltk-debuginfoUpgrade fltkUpgrade tigervnc-iconsUpgrade tigervnc-server-appletUpgrade fltk-staticUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade fltk-fluidUpgrade tigervncUpgrade fltk-devel | Mar 21, 2017 | Feb 11, 2017 |
| Suse | — | Upgrade libXvnc1Upgrade tigervncUpgrade xorg-x11-Xvnc | Feb 11, 2017 | Feb 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub