In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-tigervnc | Sep 1, 2017 | Mar 31, 2017 |
| Centos_linux | — | centos-upgrade-fltkcentos-upgrade-fltk-debuginfocentos-upgrade-fltk-develcentos-upgrade-fltk-fluidcentos-upgrade-fltk-staticcentos-upgrade-tigervnccentos-upgrade-tigervnc-debuginfocentos-upgrade-tigervnc-iconscentos-upgrade-tigervnc-licensecentos-upgrade-tigervnc-servercentos-upgrade-tigervnc-server-appletcentos-upgrade-tigervnc-server-minimalcentos-upgrade-tigervnc-server-module | Aug 28, 2019 | Apr 1, 2017 |
| Debian | debian-upgrade-tigervnc | Jul 30, 2024 | Apr 1, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-tigervnc | Jan 12, 2018 | Mar 31, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-tigervnchuawei-euleros-2_0_sp1-upgrade-tigervnc-iconshuawei-euleros-2_0_sp1-upgrade-tigervnc-licensehuawei-euleros-2_0_sp1-upgrade-tigervnc-serverhuawei-euleros-2_0_sp1-upgrade-tigervnc-server-minimal | Nov 30, 2017 | Mar 31, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-tigervnchuawei-euleros-2_0_sp2-upgrade-tigervnc-iconshuawei-euleros-2_0_sp2-upgrade-tigervnc-licensehuawei-euleros-2_0_sp2-upgrade-tigervnc-serverhuawei-euleros-2_0_sp2-upgrade-tigervnc-server-minimal | Nov 30, 2017 | Mar 31, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-desktop-remote-desktop-tigervnc-1-7-1-0-175-3-31-0-4-1547oracle-solaris-11-3-upgrade-x11-library-toolkit-fltk-1-3-4-0-175-3-31-0-4-1547oracle-solaris-11-3-upgrade-x11-server-xvnc-1-7-1-0-175-3-31-0-4-1547 | Apr 18, 2018 | Mar 31, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-fltkoracle-linux-upgrade-fltk-develoracle-linux-upgrade-fltk-fluidoracle-linux-upgrade-fltk-staticoracle-linux-upgrade-tigervncoracle-linux-upgrade-tigervnc-iconsoracle-linux-upgrade-tigervnc-licenseoracle-linux-upgrade-tigervnc-serveroracle-linux-upgrade-tigervnc-server-appletoracle-linux-upgrade-tigervnc-server-minimaloracle-linux-upgrade-tigervnc-server-module | Aug 8, 2017 | Mar 29, 2017 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-fltkredhat-upgrade-fltk-debuginforedhat-upgrade-fltk-develredhat-upgrade-fltk-fluidredhat-upgrade-fltk-staticredhat-upgrade-tigervncredhat-upgrade-tigervnc-debuginforedhat-upgrade-tigervnc-iconsredhat-upgrade-tigervnc-licenseredhat-upgrade-tigervnc-serverredhat-upgrade-tigervnc-server-appletredhat-upgrade-tigervnc-server-minimalredhat-upgrade-tigervnc-server-module | Aug 3, 2017 | Mar 31, 2017 | |
| Suse | — | suse-upgrade-libxvnc1suse-upgrade-tigervncsuse-upgrade-xorg-x11-xvnc | Apr 19, 2017 | Mar 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub