In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tigervnc | Sep 1, 2017 | Mar 31, 2017 |
| Centos_linux | — | Upgrade fltk-develUpgrade tigervnc-server-minimalUpgrade fltk-staticUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade tigervnc-debuginfoUpgrade fltk-debuginfoUpgrade fltk-fluidUpgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade fltk | Aug 28, 2019 | Apr 1, 2017 |
| Debian | — | Upgrade tigervnc | Jul 30, 2024 | Apr 1, 2017 |
| Gentoo Linux | — | Upgrade net-misc/tigervnc. | Jan 12, 2018 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tigervncUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade tigervnc-server-minimal | Nov 30, 2017 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc | Nov 30, 2017 | Mar 31, 2017 |
| Oracle Solaris | — | Upgrade x11/library/toolkit/fltk to version 1.3.4-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/server/xvnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3 | Apr 18, 2018 | Mar 31, 2017 |
| Oracle_linux | — | Upgrade fltk-develUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade fltk-fluidUpgrade tigervnc-server-minimalUpgrade fltk-staticUpgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade tigervncUpgrade fltk | Aug 8, 2017 | Mar 29, 2017 |
| Redhat_linux | — | Upgrade tigervnc-debuginfoUpgrade tigervnc-server-minimalUpgrade fltkUpgrade tigervnc-server-moduleUpgrade tigervnc-server-appletUpgrade fltk-staticUpgrade tigervnc-iconsUpgrade fltk-debuginfoUpgrade tigervncUpgrade fltk-fluidUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade fltk-develNo solution exists | Aug 3, 2017 | Mar 31, 2017 |
| Suse | — | Upgrade tigervncUpgrade libXvnc1Upgrade xorg-x11-xvnc | Apr 19, 2017 | Mar 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub