CVE-2017-7395
Fixed in a distro release EPSS 1%
In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server.
Products: tigervnc
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tigervnc | 1.7.0+dfsg-7 |
| Debian 13 | tigervnc | 1.7.0+dfsg-7 |
| Debian 14 | tigervnc | 1.7.0+dfsg-7 |
| Red Hat Enterprise Linux 7 | fltk | 0:1.3.4-1.el7 |
| Red Hat Enterprise Linux 7 | fltk-debuginfo | 0:1.3.4-1.el7 |
| Red Hat Enterprise Linux 7 | fltk-devel | 0:1.3.4-1.el7 |
| Red Hat Enterprise Linux 7 | fltk-fluid | 0:1.3.4-1.el7 |
| Red Hat Enterprise Linux 7 | fltk-static | 0:1.3.4-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-debuginfo | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-icons | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-license | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-applet | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-minimal | 0:1.8.0-1.el7 |
| Red Hat Enterprise Linux 7 | tigervnc-server-module | 0:1.8.0-1.el7 |
| SUSE Linux Enterprise Desktop 12 SP1 | tigervnc | 1.4.3-24.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | tigervnc | 1.6.0-18.11.1 |
| SUSE Linux Enterprise Server 12 SP1 | tigervnc | 1.4.3-24.1 |
| SUSE Linux Enterprise Server 12 SP2 | tigervnc | 1.6.0-18.11.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | tigervnc | 1.6.0-18.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | tigervnc | 1.4.3-24.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | tigervnc | 1.6.0-18.11.1 |