In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tigervnc | Sep 1, 2017 | Mar 31, 2017 |
| Centos_linux | — | Upgrade tigervnc-server-appletUpgrade tigervnc-debuginfoUpgrade fltk-develUpgrade tigervncUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade fltk-debuginfoUpgrade fltkUpgrade tigervnc-licenseUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade fltk-fluidUpgrade fltk-static | Aug 28, 2019 | Apr 1, 2017 |
| Debian | — | Upgrade tigervnc | Jul 30, 2024 | Apr 1, 2017 |
| Gentoo Linux | — | Upgrade net-misc/tigervnc. | Jan 12, 2018 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tigervncUpgrade tigervnc-licenseUpgrade tigervnc-server-minimalUpgrade tigervnc-serverUpgrade tigervnc-icons | Nov 30, 2017 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tigervnc-licenseUpgrade tigervncUpgrade tigervnc-serverUpgrade tigervnc-iconsUpgrade tigervnc-server-minimal | Nov 30, 2017 | Mar 31, 2017 |
| Oracle Solaris | — | Upgrade x11/server/xvnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/library/toolkit/fltk to version 1.3.4-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3 | Apr 18, 2018 | Mar 31, 2017 |
| Oracle_linux | — | Upgrade tigervnc-serverUpgrade fltk-develUpgrade tigervnc-iconsUpgrade fltk-staticUpgrade tigervnc-server-moduleUpgrade fltk-fluidUpgrade tigervnc-server-minimalUpgrade tigervnc-server-appletUpgrade tigervncUpgrade tigervnc-licenseUpgrade fltk | Aug 8, 2017 | Mar 27, 2017 |
| Redhat_linux | — | Upgrade tigervnc-debuginfoUpgrade tigervnc-server-appletUpgrade fltk-staticUpgrade fltkUpgrade tigervnc-server-moduleUpgrade tigervnc-iconsUpgrade fltk-debuginfoUpgrade tigervnc-server-minimalUpgrade fltk-develUpgrade tigervncNo solution existsUpgrade tigervnc-serverUpgrade fltk-fluidUpgrade tigervnc-license | Aug 3, 2017 | Mar 31, 2017 |
| Suse | — | Upgrade tigervncUpgrade libXvnc1Upgrade xorg-x11-Xvnc | Apr 19, 2017 | Mar 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub