| Max CVSS | 6.8 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-7392 | 5.0 |
In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.
|
03-10-2019 - 00:03 | 01-04-2017 - 02:59 | |
| CVE-2017-7396 | 5.0 |
In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.
|
03-10-2019 - 00:03 | 01-04-2017 - 02:59 | |
| CVE-2016-10207 | 5.0 |
The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early.
|
01-02-2018 - 17:05 | 28-02-2017 - 18:59 | |
| CVE-2017-7395 | 4.0 |
In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server.
|
13-01-2018 - 02:29 | 01-04-2017 - 02:59 | |
| CVE-2017-7393 | 6.5 |
In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution.
|
13-01-2018 - 02:29 | 01-04-2017 - 02:59 | |
| CVE-2017-7394 | 5.0 |
In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.
|
13-01-2018 - 02:29 | 01-04-2017 - 02:59 | |
| CVE-2017-5581 | 6.8 |
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
|
05-01-2018 - 02:31 | 28-02-2017 - 18:59 |