In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade tigervnc | Sep 1, 2017 | Mar 31, 2017 |
| Centos_linux | — | Upgrade tigervnc-server-appletUpgrade tigervnc-debuginfoUpgrade tigervncUpgrade fltk-develUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade fltk-staticUpgrade fltk-fluidUpgrade fltk-debuginfoUpgrade tigervnc-server-minimalUpgrade fltkUpgrade tigervnc-licenseUpgrade tigervnc-icons | Aug 28, 2019 | Apr 1, 2017 |
| Debian | — | Upgrade tigervnc | Jul 30, 2024 | Apr 1, 2017 |
| Gentoo Linux | — | Upgrade net-misc/tigervnc. | Jan 12, 2018 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervncUpgrade tigervnc-license | Nov 30, 2017 | Mar 31, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tigervnc-server-minimalUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade tigervncUpgrade tigervnc-license | Nov 30, 2017 | Mar 31, 2017 |
| Oracle Solaris | — | Upgrade x11/server/xvnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade desktop/remote-desktop/tigervnc to version 1.7.1-0.175.3.31.0.4.1547 on Solaris 11.3Upgrade x11/library/toolkit/fltk to version 1.3.4-0.175.3.31.0.4.1547 on Solaris 11.3 | Apr 18, 2018 | Mar 31, 2017 |
| Oracle_linux | — | Upgrade fltk-develUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade fltk-staticUpgrade tigervnc-iconsUpgrade tigervnc-serverUpgrade fltk-fluidUpgrade fltkUpgrade tigervnc-server-appletUpgrade tigervnc-licenseUpgrade tigervnc | Aug 8, 2017 | Mar 27, 2017 |
| Redhat_linux | — | Upgrade tigervnc-licenseUpgrade fltk-fluidUpgrade tigervncUpgrade fltk-develNo solution existsUpgrade tigervnc-serverUpgrade tigervnc-server-minimalUpgrade fltk-debuginfoUpgrade tigervnc-debuginfoUpgrade fltkUpgrade fltk-staticUpgrade tigervnc-iconsUpgrade tigervnc-server-moduleUpgrade tigervnc-server-applet | Aug 3, 2017 | Mar 31, 2017 |
| Suse | — | Upgrade tigervncUpgrade xorg-x11-xvncUpgrade libXvnc1 | Apr 19, 2017 | Mar 31, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub