In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tigervnc | Sep 1, 2017 | Mar 31, 2017 |
| Centos_linux | — | Upgrade fltk-fluidUpgrade tigervnc-serverUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade fltkUpgrade tigervncUpgrade fltk-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-debuginfoUpgrade tigervnc-iconsUpgrade fltk-staticUpgrade tigervnc-server-minimalUpgrade fltk-devel | Aug 28, 2019 | Apr 1, 2017 |
| Debian | — | Upgrade tigervnc | Jul 30, 2024 | Apr 1, 2017 |
| Gentoo Linux | — | Upgrade net-misc/tigervnc. | Jan 12, 2018 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade tigervncUpgrade tigervnc-license | Nov 30, 2017 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tigervnc-serverUpgrade tigervncUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-license | Nov 30, 2017 | Mar 31, 2017 |
| Oracle Solaris | — | Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/server/xvnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/library/toolkit/fltk to version 1.3.4-0.175.3.31.0.4.1547 on Solaris 11.3 | Apr 18, 2018 | Mar 31, 2017 |
| Oracle_linux | — | Upgrade tigervnc-iconsUpgrade fltk-develUpgrade tigervnc-server-moduleUpgrade tigervnc-server-minimalUpgrade fltk-staticUpgrade fltk-fluidUpgrade tigervncUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade tigervnc-serverUpgrade fltk | Aug 8, 2017 | Mar 29, 2017 |
| Redhat_linux | — | Upgrade tigervnc-serverUpgrade tigervncUpgrade fltk-develUpgrade fltk-fluidUpgrade tigervnc-licenseNo solution existsUpgrade fltk-staticUpgrade fltkUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade tigervnc-debuginfoUpgrade tigervnc-server-moduleUpgrade fltk-debuginfoUpgrade tigervnc-server-minimal | Aug 3, 2017 | Mar 31, 2017 |
| Suse | — | Upgrade xorg-x11-xvncUpgrade libXvnc1Upgrade tigervnc | Apr 19, 2017 | Mar 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub