csaf_suse - suse-su-2017:1093-1

suse-su-2017:1093-1

Vulnerability from csaf_suse

Published

2017-04-22 08:14

Modified

2017-04-22 08:14

Summary

Security update for tigervnc

Notes

Title of the patch

Security update for tigervnc

Description of the patch

This update for tigervnc provides the several fixes. These security issues were fixed: - CVE-2017-7392, CVE-2017-7396: Client can cause leak in VNC server (bsc#1031886) - CVE-2017-7395: Authenticated VNC client can crash VNC server (bsc#1031877) - CVE-2017-7394: Client can crash or block VNC server (bsc#1031879) - CVE-2017-7393: Authenticated client can cause double free in VNC server (bsc#1031875) - Prevent buffer overflow in VNC client, allowing for crashing the client (bnc#1032880)

Patchnames

SUSE-SLE-DESKTOP-12-SP1-2017-636,SUSE-SLE-SERVER-12-SP1-2017-636

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for tigervnc",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for tigervnc provides the several fixes.\n\nThese security issues were fixed:\n\n- CVE-2017-7392, CVE-2017-7396: Client can cause leak in VNC server (bsc#1031886)\n- CVE-2017-7395: Authenticated VNC client can crash VNC server (bsc#1031877)\n- CVE-2017-7394: Client can crash or block VNC server (bsc#1031879)\n- CVE-2017-7393: Authenticated client can cause double free in VNC server (bsc#1031875)\n- Prevent buffer overflow in VNC client, allowing for crashing the client (bnc#1032880)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP1-2017-636,SUSE-SLE-SERVER-12-SP1-2017-636",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1093-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:1093-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171093-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:1093-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-April/002824.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031875",
        "url": "https://bugzilla.suse.com/1031875"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031877",
        "url": "https://bugzilla.suse.com/1031877"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031879",
        "url": "https://bugzilla.suse.com/1031879"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031886",
        "url": "https://bugzilla.suse.com/1031886"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1032880",
        "url": "https://bugzilla.suse.com/1032880"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7392 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7392/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7393 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7393/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7394 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7394/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7395 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7395/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7396 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7396/"
      }
    ],
    "title": "Security update for tigervnc",
    "tracking": {
      "current_release_date": "2017-04-22T08:14:11Z",
      "generator": {
        "date": "2017-04-22T08:14:11Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:1093-1",
      "initial_release_date": "2017-04-22T08:14:11Z",
      "revision_history": [
        {
          "date": "2017-04-22T08:14:11Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-1.4.3-24.1.ppc64le",
                "product": {
                  "name": "tigervnc-1.4.3-24.1.ppc64le",
                  "product_id": "tigervnc-1.4.3-24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
                "product": {
                  "name": "xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
                  "product_id": "xorg-x11-Xvnc-1.4.3-24.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-1.4.3-24.1.s390x",
                "product": {
                  "name": "tigervnc-1.4.3-24.1.s390x",
                  "product_id": "tigervnc-1.4.3-24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-Xvnc-1.4.3-24.1.s390x",
                "product": {
                  "name": "xorg-x11-Xvnc-1.4.3-24.1.s390x",
                  "product_id": "xorg-x11-Xvnc-1.4.3-24.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tigervnc-1.4.3-24.1.x86_64",
                "product": {
                  "name": "tigervnc-1.4.3-24.1.x86_64",
                  "product_id": "tigervnc-1.4.3-24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xorg-x11-Xvnc-1.4.3-24.1.x86_64",
                "product": {
                  "name": "xorg-x11-Xvnc-1.4.3-24.1.x86_64",
                  "product_id": "xorg-x11-Xvnc-1.4.3-24.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-1.4.3-24.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64"
        },
        "product_reference": "tigervnc-1.4.3-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-1.4.3-24.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
        },
        "product_reference": "xorg-x11-Xvnc-1.4.3-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-1.4.3-24.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le"
        },
        "product_reference": "tigervnc-1.4.3-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-1.4.3-24.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x"
        },
        "product_reference": "tigervnc-1.4.3-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-1.4.3-24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64"
        },
        "product_reference": "tigervnc-1.4.3-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-1.4.3-24.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le"
        },
        "product_reference": "xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-1.4.3-24.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x"
        },
        "product_reference": "xorg-x11-Xvnc-1.4.3-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-1.4.3-24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
        },
        "product_reference": "xorg-x11-Xvnc-1.4.3-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-1.4.3-24.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le"
        },
        "product_reference": "tigervnc-1.4.3-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-1.4.3-24.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x"
        },
        "product_reference": "tigervnc-1.4.3-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tigervnc-1.4.3-24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64"
        },
        "product_reference": "tigervnc-1.4.3-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-1.4.3-24.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le"
        },
        "product_reference": "xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-1.4.3-24.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x"
        },
        "product_reference": "xorg-x11-Xvnc-1.4.3-24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xorg-x11-Xvnc-1.4.3-24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
        },
        "product_reference": "xorg-x11-Xvnc-1.4.3-24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-7392",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7392"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7392",
          "url": "https://www.suse.com/security/cve/CVE-2017-7392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1031886 for CVE-2017-7392",
          "url": "https://bugzilla.suse.com/1031886"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-04-22T08:14:11Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-7392"
    },
    {
      "cve": "CVE-2017-7393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7393",
          "url": "https://www.suse.com/security/cve/CVE-2017-7393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1031875 for CVE-2017-7393",
          "url": "https://bugzilla.suse.com/1031875"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1031879 for CVE-2017-7393",
          "url": "https://bugzilla.suse.com/1031879"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-04-22T08:14:11Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-7393"
    },
    {
      "cve": "CVE-2017-7394",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7394"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7394",
          "url": "https://www.suse.com/security/cve/CVE-2017-7394"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1031879 for CVE-2017-7394",
          "url": "https://bugzilla.suse.com/1031879"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-04-22T08:14:11Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-7394"
    },
    {
      "cve": "CVE-2017-7395",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7395"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7395",
          "url": "https://www.suse.com/security/cve/CVE-2017-7395"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1031877 for CVE-2017-7395",
          "url": "https://bugzilla.suse.com/1031877"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-04-22T08:14:11Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-7395"
    },
    {
      "cve": "CVE-2017-7396",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7396"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7396",
          "url": "https://www.suse.com/security/cve/CVE-2017-7396"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1031886 for CVE-2017-7396",
          "url": "https://bugzilla.suse.com/1031886"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:tigervnc-1.4.3-24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xorg-x11-Xvnc-1.4.3-24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-04-22T08:14:11Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-7396"
    }
  ]
}

CVE-2017-7393 (GCVE-0-2017-7393)

Vulnerability from cvelistv5

Published

2017-04-01 01:07

Modified

2024-08-05 16:04

Severity ?

CWE

Summary

In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2000	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97305	vdb-entry, x_refsource_BID
	https://github.com/TigerVNC/tigervnc/pull/438	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201801-13	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:10.588Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2000",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2000"
          },
          {
            "name": "97305",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97305"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/TigerVNC/tigervnc/pull/438"
          },
          {
            "name": "GLSA-201801-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201801-13"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-03-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-12T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2017:2000",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2000"
        },
        {
          "name": "97305",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97305"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/TigerVNC/tigervnc/pull/438"
        },
        {
          "name": "GLSA-201801-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201801-13"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-7393",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2000",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2000"
            },
            {
              "name": "97305",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97305"
            },
            {
              "name": "https://github.com/TigerVNC/tigervnc/pull/438",
              "refsource": "CONFIRM",
              "url": "https://github.com/TigerVNC/tigervnc/pull/438"
            },
            {
              "name": "GLSA-201801-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201801-13"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-7393",
    "datePublished": "2017-04-01T01:07:00",
    "dateReserved": "2017-03-31T00:00:00",
    "dateUpdated": "2024-08-05T16:04:10.588Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7394 (GCVE-0-2017-7394)

Vulnerability from cvelistv5

Published

2017-04-01 01:07

Modified

2024-08-05 16:04

Severity ?

CWE

Summary

In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2000	vendor-advisory, x_refsource_REDHAT
	https://github.com/TigerVNC/tigervnc/pull/440	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97305	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201801-13	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:10.591Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2000",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2000"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/TigerVNC/tigervnc/pull/440"
          },
          {
            "name": "97305",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97305"
          },
          {
            "name": "GLSA-201801-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201801-13"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-03-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-12T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2017:2000",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2000"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/TigerVNC/tigervnc/pull/440"
        },
        {
          "name": "97305",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97305"
        },
        {
          "name": "GLSA-201801-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201801-13"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-7394",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2000",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2000"
            },
            {
              "name": "https://github.com/TigerVNC/tigervnc/pull/440",
              "refsource": "CONFIRM",
              "url": "https://github.com/TigerVNC/tigervnc/pull/440"
            },
            {
              "name": "97305",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97305"
            },
            {
              "name": "GLSA-201801-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201801-13"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-7394",
    "datePublished": "2017-04-01T01:07:00",
    "dateReserved": "2017-03-31T00:00:00",
    "dateUpdated": "2024-08-05T16:04:10.591Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7392 (GCVE-0-2017-7392)

Vulnerability from cvelistv5

Published

2017-04-01 01:07

Modified

2024-08-05 16:04

Severity ?

CWE

Summary

In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:2000	vendor-advisory, x_refsource_REDHAT
	https://github.com/TigerVNC/tigervnc/pull/441	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97305	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201801-13	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:10.574Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2000",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2000"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/TigerVNC/tigervnc/pull/441"
          },
          {
            "name": "97305",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97305"
          },
          {
            "name": "GLSA-201801-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201801-13"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-03-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-12T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2017:2000",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2000"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/TigerVNC/tigervnc/pull/441"
        },
        {
          "name": "97305",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97305"
        },
        {
          "name": "GLSA-201801-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201801-13"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-7392",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2000",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2000"
            },
            {
              "name": "https://github.com/TigerVNC/tigervnc/pull/441",
              "refsource": "CONFIRM",
              "url": "https://github.com/TigerVNC/tigervnc/pull/441"
            },
            {
              "name": "97305",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97305"
            },
            {
              "name": "GLSA-201801-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201801-13"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-7392",
    "datePublished": "2017-04-01T01:07:00",
    "dateReserved": "2017-03-31T00:00:00",
    "dateUpdated": "2024-08-05T16:04:10.574Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7395 (GCVE-0-2017-7395)

Vulnerability from cvelistv5

Published

2017-04-01 01:07

Modified

2024-08-05 16:04

Severity ?

CWE

Summary

In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server.

References

►

URL

Tags

	https://github.com/TigerVNC/tigervnc/pull/436	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2000	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97305	vdb-entry, x_refsource_BID
	https://github.com/TigerVNC/tigervnc/pull/436/commits/bf3bdac082978ca32895a4b6a123016094905689	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201801-13	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:10.620Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/TigerVNC/tigervnc/pull/436"
          },
          {
            "name": "RHSA-2017:2000",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2000"
          },
          {
            "name": "97305",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97305"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/TigerVNC/tigervnc/pull/436/commits/bf3bdac082978ca32895a4b6a123016094905689"
          },
          {
            "name": "GLSA-201801-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201801-13"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-03-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-12T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/TigerVNC/tigervnc/pull/436"
        },
        {
          "name": "RHSA-2017:2000",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2000"
        },
        {
          "name": "97305",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97305"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/TigerVNC/tigervnc/pull/436/commits/bf3bdac082978ca32895a4b6a123016094905689"
        },
        {
          "name": "GLSA-201801-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201801-13"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-7395",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/TigerVNC/tigervnc/pull/436",
              "refsource": "CONFIRM",
              "url": "https://github.com/TigerVNC/tigervnc/pull/436"
            },
            {
              "name": "RHSA-2017:2000",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2000"
            },
            {
              "name": "97305",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97305"
            },
            {
              "name": "https://github.com/TigerVNC/tigervnc/pull/436/commits/bf3bdac082978ca32895a4b6a123016094905689",
              "refsource": "CONFIRM",
              "url": "https://github.com/TigerVNC/tigervnc/pull/436/commits/bf3bdac082978ca32895a4b6a123016094905689"
            },
            {
              "name": "GLSA-201801-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201801-13"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-7395",
    "datePublished": "2017-04-01T01:07:00",
    "dateReserved": "2017-03-31T00:00:00",
    "dateUpdated": "2024-08-05T16:04:10.620Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7396 (GCVE-0-2017-7396)

Vulnerability from cvelistv5

Published

2017-04-01 01:07

Modified

2024-08-05 16:04

Severity ?

CWE

Summary

In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.

References

►

URL

Tags

	https://github.com/TigerVNC/tigervnc/pull/436	x_refsource_CONFIRM
	https://github.com/TigerVNC/tigervnc/pull/436/commits/dccb5f7d776e93863ae10bbff56a45c523c6eeb0	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2000	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97305	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201801-13	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:10.616Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/TigerVNC/tigervnc/pull/436"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/TigerVNC/tigervnc/pull/436/commits/dccb5f7d776e93863ae10bbff56a45c523c6eeb0"
          },
          {
            "name": "RHSA-2017:2000",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2000"
          },
          {
            "name": "97305",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97305"
          },
          {
            "name": "GLSA-201801-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201801-13"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-03-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-12T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/TigerVNC/tigervnc/pull/436"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/TigerVNC/tigervnc/pull/436/commits/dccb5f7d776e93863ae10bbff56a45c523c6eeb0"
        },
        {
          "name": "RHSA-2017:2000",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2000"
        },
        {
          "name": "97305",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97305"
        },
        {
          "name": "GLSA-201801-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201801-13"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-7396",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/TigerVNC/tigervnc/pull/436",
              "refsource": "CONFIRM",
              "url": "https://github.com/TigerVNC/tigervnc/pull/436"
            },
            {
              "name": "https://github.com/TigerVNC/tigervnc/pull/436/commits/dccb5f7d776e93863ae10bbff56a45c523c6eeb0",
              "refsource": "CONFIRM",
              "url": "https://github.com/TigerVNC/tigervnc/pull/436/commits/dccb5f7d776e93863ae10bbff56a45c523c6eeb0"
            },
            {
              "name": "RHSA-2017:2000",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2000"
            },
            {
              "name": "97305",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97305"
            },
            {
              "name": "GLSA-201801-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201801-13"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-7396",
    "datePublished": "2017-04-01T01:07:00",
    "dateReserved": "2017-03-31T00:00:00",
    "dateUpdated": "2024-08-05T16:04:10.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2017:1093-1

Vulnerability from csaf_suse

CVE-2017-7393 (GCVE-0-2017-7393)

Vulnerability from cvelistv5

CVE-2017-7394 (GCVE-0-2017-7394)

Vulnerability from cvelistv5

CVE-2017-7392 (GCVE-0-2017-7392)

Vulnerability from cvelistv5

CVE-2017-7395 (GCVE-0-2017-7395)

Vulnerability from cvelistv5

CVE-2017-7396 (GCVE-0-2017-7396)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature