CVE-2017-7394

Опубликовано: 01 апр. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.

Ссылки

http://www.securityfocus.com/bid/97305
https://access.redhat.com/errata/RHSA-2017:2000
https://github.com/TigerVNC/tigervnc/pull/440
Issue Tracking
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201801-13
http://www.securityfocus.com/bid/97305
https://access.redhat.com/errata/RHSA-2017:2000
https://github.com/TigerVNC/tigervnc/pull/440
Issue Tracking
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201801-13

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tigervnc:tigervnc:1.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02813

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2017-7394

CVSS3: 7.5

ubuntu

больше 8 лет назад

In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.

CVE-2017-7394

CVSS3: 7.5

redhat

больше 8 лет назад

In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.

CVE-2017-7394

CVSS3: 7.5

debian

больше 8 лет назад

In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), una ...

GHSA-p2f4-v5gm-9wqj

CVSS3: 7.5

github

больше 3 лет назад

In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.

openSUSE-SU-2017:1028-1

suse-cvrf

больше 8 лет назад

Security update for tigervnc

EPSS

Процентиль: 86%

0.02813

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20