In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tigervnc | Sep 1, 2017 | Mar 31, 2017 |
| Centos_linux | — | Upgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade fltkUpgrade fltk-staticUpgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade fltk-develUpgrade fltk-debuginfoUpgrade tigervnc-licenseUpgrade fltk-fluidUpgrade tigervnc-debuginfoUpgrade tigervnc | Aug 28, 2019 | Apr 1, 2017 |
| Debian | — | Upgrade tigervnc | Jul 30, 2024 | Apr 1, 2017 |
| Gentoo Linux | — | Upgrade net-misc/tigervnc. | Jan 12, 2018 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervncUpgrade tigervnc-iconsUpgrade tigervnc-license | Nov 30, 2017 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tigervncUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervnc-icons | Nov 30, 2017 | Mar 31, 2017 |
| Oracle Solaris | — | Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/server/xvnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/library/toolkit/fltk to version 1.3.4-0.175.3.31.0.4.1547 on Solaris 11.3 | Apr 18, 2018 | Mar 31, 2017 |
| Oracle_linux | — | Upgrade fltk-staticUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade tigervncUpgrade tigervnc-licenseUpgrade fltkUpgrade fltk-develUpgrade fltk-fluid | Aug 8, 2017 | Mar 27, 2017 |
| Redhat_linux | — | Upgrade fltk-develUpgrade fltk-staticUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade tigervnc-server-appletUpgrade tigervnc-iconsNo solution existsUpgrade fltk-fluidUpgrade fltk-debuginfoUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade fltk | Aug 3, 2017 | Mar 31, 2017 |
| Suse | — | Upgrade libXvnc1Upgrade xorg-x11-XvncUpgrade tigervnc | Apr 19, 2017 | Mar 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub