CVE-2017-7392

Опубликовано: 01 апр. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.

Ссылки

http://www.securityfocus.com/bid/97305
https://access.redhat.com/errata/RHSA-2017:2000
https://github.com/TigerVNC/tigervnc/pull/441
Issue Tracking
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201801-13
http://www.securityfocus.com/bid/97305
https://access.redhat.com/errata/RHSA-2017:2000
https://github.com/TigerVNC/tigervnc/pull/441
Issue Tracking
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201801-13

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tigervnc:tigervnc:1.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00426

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-772

Связанные уязвимости

CVE-2017-7392

CVSS3: 7.5

ubuntu

почти 9 лет назад

In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.

CVE-2017-7392

CVSS3: 3.7

redhat

почти 9 лет назад

In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.

CVE-2017-7392

CVSS3: 7.5

debian

почти 9 лет назад

In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityV ...

GHSA-24jm-j25m-87p2

CVSS3: 7.5

github

больше 3 лет назад

In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.

openSUSE-SU-2017:1028-1

suse-cvrf

почти 9 лет назад

Security update for tigervnc

EPSS

Процентиль: 62%

0.00426

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-772