Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-10207

Fixed in a distro release EPSS 3%

The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early.

Published 2017-02-28 · CVE record · OSV

Products: opensuse leap, tigervnc

Distro releases

ReleasePackageFixed in
Debian 12tigervnc1.7.0-1
Debian 13tigervnc1.7.0-1
Debian 14tigervnc1.7.0-1
Red Hat Enterprise Linux 6tigervnc0:1.1.0-24.el6
Red Hat Enterprise Linux 6tigervnc-debuginfo0:1.1.0-24.el6
Red Hat Enterprise Linux 6tigervnc-server0:1.1.0-24.el6
Red Hat Enterprise Linux 6tigervnc-server-applet0:1.1.0-24.el6
Red Hat Enterprise Linux 6tigervnc-server-module0:1.1.0-24.el6
Red Hat Enterprise Linux 7fltk0:1.3.4-1.el7
Red Hat Enterprise Linux 7fltk-debuginfo0:1.3.4-1.el7
Red Hat Enterprise Linux 7fltk-devel0:1.3.4-1.el7
Red Hat Enterprise Linux 7fltk-fluid0:1.3.4-1.el7
Red Hat Enterprise Linux 7fltk-static0:1.3.4-1.el7
Red Hat Enterprise Linux 7tigervnc0:1.8.0-1.el7
Red Hat Enterprise Linux 7tigervnc-debuginfo0:1.8.0-1.el7
Red Hat Enterprise Linux 7tigervnc-icons0:1.8.0-1.el7
Red Hat Enterprise Linux 7tigervnc-license0:1.8.0-1.el7
Red Hat Enterprise Linux 7tigervnc-server0:1.8.0-1.el7
Red Hat Enterprise Linux 7tigervnc-server-applet0:1.8.0-1.el7
Red Hat Enterprise Linux 7tigervnc-server-minimal0:1.8.0-1.el7
Red Hat Enterprise Linux 7tigervnc-server-module0:1.8.0-1.el7
SUSE Linux Enterprise Desktop 12 SP1tigervnc1.4.3-19.1
SUSE Linux Enterprise Desktop 12 SP2tigervnc1.6.0-16.4
SUSE Linux Enterprise Server 12 SP1tigervnc1.4.3-19.1
SUSE Linux Enterprise Server 12 SP2tigervnc1.6.0-16.4
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2tigervnc1.6.0-16.4
SUSE Linux Enterprise Server for SAP Applications 12 SP1tigervnc1.4.3-19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2tigervnc1.6.0-16.4