CVE-2017-7395 — Integer Overflow or Wraparound in Tigervnc

CWE-190 — Integer Overflow or Wraparound8 documents7 sources
Severity
6.5MEDIUMNVD
EPSS
0.5%
top 34.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Tigervnc
Timeline
PublishedApr 1
Latest updateMay 14

Description

In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶Debiantigervnc/tigervnc< 1.7.0+dfsg-7+3

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-mmcm-g586-7f43: In TigerVNC 1↗2022-05-14
▶
CVEList
CVE-2017-7395: In TigerVNC 1↗2017-04-01
▶
OSV
CVE-2017-7395: In TigerVNC 1↗2017-04-01
▶

📋Vendor Advisories

2
Red Hat
tigervnc: Integer overflow in SMsgReader::readClientCutText↗2017-03-27
▶
Debian
CVE-2017-7395: tigervnc - In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an ...↗2017
▶

💬Community

2
Bugzilla
CVE-2017-7392 CVE-2017-7393 CVE-2017-7394 CVE-2017-7395 CVE-2017-7396 tigervnc: various flaws [fedora-all]↗2017-04-04
▶
Bugzilla
CVE-2017-7395 tigervnc: Integer overflow in SMsgReader::readClientCutText↗2017-04-04
▶