In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tigervnc | Sep 1, 2017 | Mar 31, 2017 |
| Centos_linux | — | Upgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade tigervnc-licenseUpgrade fltk-staticUpgrade tigervnc-server-moduleUpgrade fltk-debuginfoUpgrade fltkUpgrade fltk-fluidUpgrade fltk-develUpgrade tigervncUpgrade tigervnc-debuginfoUpgrade tigervnc-server-applet | Aug 28, 2019 | Apr 1, 2017 |
| Debian | — | Upgrade tigervnc | Jul 30, 2024 | Apr 1, 2017 |
| Gentoo Linux | — | Upgrade net-misc/tigervnc. | Jan 12, 2018 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervncUpgrade tigervnc-license | Nov 30, 2017 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tigervncUpgrade tigervnc-licenseUpgrade tigervnc-iconsUpgrade tigervnc-server-minimalUpgrade tigervnc-server | Nov 30, 2017 | Mar 31, 2017 |
| Oracle Solaris | — | Upgrade x11/server/xvnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/library/toolkit/fltk to version 1.3.4-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3 | Apr 18, 2018 | Mar 31, 2017 |
| Oracle_linux | — | Upgrade fltk-staticUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade fltk-develUpgrade tigervnc-server-moduleUpgrade fltk-fluidUpgrade fltkUpgrade tigervncUpgrade tigervnc-licenseUpgrade tigervnc-server-applet | Aug 8, 2017 | Mar 27, 2017 |
| Redhat_linux | — | Upgrade tigervnc-debuginfoUpgrade fltk-staticUpgrade fltkUpgrade tigervnc-server-moduleUpgrade tigervnc-server-appletUpgrade tigervnc-iconsUpgrade fltk-debuginfoUpgrade tigervnc-server-minimalUpgrade fltk-fluidNo solution existsUpgrade tigervnc-licenseUpgrade tigervncUpgrade fltk-develUpgrade tigervnc-server | Aug 3, 2017 | Mar 31, 2017 |
| Suse | — | Upgrade tigervncUpgrade xorg-x11-XvncUpgrade libXvnc1 | Apr 19, 2017 | Mar 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub