In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tigervnc | Sep 1, 2017 | Mar 31, 2017 |
| Centos_linux | — | Upgrade fltkUpgrade fltk-staticUpgrade tigervnc-server-moduleUpgrade tigervnc-debuginfoUpgrade fltk-debuginfoUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-server-appletUpgrade tigervncUpgrade fltk-develUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade fltk-fluid | Aug 28, 2019 | Apr 1, 2017 |
| Debian | — | Upgrade tigervnc | Jul 30, 2024 | Apr 1, 2017 |
| Gentoo Linux | — | Upgrade net-misc/tigervnc. | Jan 12, 2018 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade tigervnc | Nov 30, 2017 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade tigervnc-server-minimal | Nov 30, 2017 | Mar 31, 2017 |
| Oracle Solaris | — | Upgrade x11/library/toolkit/fltk to version 1.3.4-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/server/xvnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3 | Apr 18, 2018 | Mar 31, 2017 |
| Oracle_linux | — | Upgrade fltk-develUpgrade tigervnc-serverUpgrade fltk-fluidUpgrade tigervncUpgrade tigervnc-server-moduleUpgrade fltk-staticUpgrade fltkUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervnc-server-appletUpgrade tigervnc-license | Aug 8, 2017 | Mar 29, 2017 |
| Redhat_linux | — | Upgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade fltk-fluidUpgrade fltk-develUpgrade tigervnc-server-moduleUpgrade fltk-staticNo solution existsUpgrade tigervnc-debuginfoUpgrade tigervnc-licenseUpgrade tigervnc-server-appletUpgrade tigervncUpgrade fltk-debuginfoUpgrade fltk | Aug 3, 2017 | Mar 31, 2017 |
| Suse | — | Upgrade xorg-x11-XvncUpgrade libXvnc1Upgrade tigervnc | Apr 19, 2017 | Mar 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub