The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tigervnc | Sep 1, 2017 | Feb 11, 2017 |
| Centos_linux | — | Upgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade fltk-develUpgrade fltk-staticUpgrade tigervnc-server-moduleUpgrade tigervncUpgrade fltk-fluidUpgrade tigervnc-licenseUpgrade tigervnc-debuginfoUpgrade fltk-debuginfoUpgrade fltk | Aug 28, 2019 | Feb 28, 2017 |
| Debian | — | Upgrade tigervnc | Jul 30, 2024 | Feb 28, 2017 |
| Gentoo Linux | — | Upgrade net-misc/tigervnc. | Jan 12, 2018 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc | Nov 30, 2017 | Feb 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervncUpgrade tigervnc-license | Nov 30, 2017 | Feb 28, 2017 |
| Oracle Solaris | — | Upgrade x11/server/xvnc to version 1.1.0-0.175.3.28.0.2.1543 on Solaris 11.3 | Feb 6, 2018 | Feb 28, 2017 |
| Oracle_linux | — | Upgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade fltk-develUpgrade fltk-fluidUpgrade fltk-staticUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervnc-server-appletUpgrade tigervncUpgrade tigervnc-licenseUpgrade fltk | Mar 28, 2017 | Aug 23, 2016 |
| Redhat_linux | — | Upgrade tigervncUpgrade fltk-develUpgrade tigervnc-debuginfoUpgrade fltk-fluidUpgrade tigervnc-server-moduleUpgrade tigervnc-licenseUpgrade fltkUpgrade tigervnc-iconsUpgrade tigervnc-server-appletUpgrade tigervnc-serverUpgrade fltk-debuginfoUpgrade tigervnc-server-minimalUpgrade fltk-static | Mar 21, 2017 | Feb 11, 2017 |
| Suse | — | Upgrade tigervncUpgrade xorg-x11-XvncUpgrade libXvnc1 | Feb 11, 2017 | Feb 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub