Name: CVE-2017-7396: Missing Release of Resource after Effective Lifetime
Creator: Rapid7
Published: 2017-04-01T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2017-7396, CWE-772, CVSS 7.5, EPSS 0.02033

In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.

CVSS Details

CVSS 3.0 Base Score: 7.5
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon_linux	—	Upgrade tigervnc	Sep 1, 2017	Mar 31, 2017
Centos_linux	—	Upgrade fltk-staticUpgrade fltk-fluidUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade fltk-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade fltkUpgrade tigervnc-server-appletUpgrade tigervncUpgrade fltk-develUpgrade tigervnc-debuginfo	Aug 28, 2019	Apr 1, 2017
Debian	—	Upgrade tigervnc	Jul 30, 2024	Apr 1, 2017
Gentoo Linux	—	Upgrade net-misc/tigervnc.	Jan 12, 2018	Mar 31, 2017
Huawei Euleros 2_0_sp1	—	Upgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervncUpgrade tigervnc-license	Nov 30, 2017	Mar 31, 2017
Huawei Euleros 2_0_sp2	—	Upgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc-licenseUpgrade tigervnc	Nov 30, 2017	Mar 31, 2017
Oracle Solaris	—	Upgrade x11/server/xvnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/library/toolkit/fltk to version 1.3.4-0.175.3.31.0.4.1547 on Solaris 11.3	Apr 18, 2018	Mar 31, 2017
Oracle_linux	—	Upgrade fltk-fluidUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade fltk-develUpgrade tigervnc-server-moduleUpgrade fltk-staticUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade fltkUpgrade tigervnc-server-appletUpgrade tigervnc	Aug 8, 2017	Mar 27, 2017
Redhat_linux	—	Upgrade fltk-staticUpgrade fltk-debuginfoUpgrade tigervnc-server-moduleUpgrade tigervnc-debuginfoUpgrade fltkUpgrade tigervnc-iconsUpgrade tigervnc-server-appletUpgrade tigervnc-server-minimalNo solution existsUpgrade tigervncUpgrade tigervnc-licenseUpgrade fltk-develUpgrade fltk-fluidUpgrade tigervnc-server	Aug 3, 2017	Mar 31, 2017
Suse	—	Upgrade xorg-x11-XvncUpgrade libXvnc1Upgrade tigervnc	Apr 19, 2017	Mar 31, 2017

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence