DeutschShown in its original language — a full translation is planned for a future version.
tigervnc: Mehrere Schwachstellen
view advisory published 2017-04-02
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in tigervnc ausnutzen, um einen Denial of Service Zustand herbeizuführen oder Code zur Ausführung zu bringen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-7396US | high7.5 | — | ||
In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server. | ||||
| CVE-2017-7395US | medium6.5 | — | ||
In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server. | ||||
| CVE-2017-7394US | high7.5 | — | ||
In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames. | ||||
| CVE-2017-7393US | high8.8 | — | ||
In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution. | ||||
| CVE-2017-7392US | high7.5 | — | ||
In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server. | ||||
02
references
External citations — patches, advisories, analysis.
- RedHat Security Advisory: RHSA-2017:2000external
- Oracle Linux Security Advisory ELSA-2025-2861 vom 2025-04-01external
- National Vulnerability Database vom 2017-04-02external
- National Vulnerability Database vom 2017-04-02external
- National Vulnerability Database vom 2017-04-02external
- National Vulnerability Database vom 2017-04-02external
- National Vulnerability Database vom 2017-04-02external
- WID-SEC-W-2025-0660 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan