SUSE-SU-2017:1094-1: tigervnc&distro=SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2017:1094-1 is a vulnerability in tigervnc&distro=SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 22-04-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for tigervnc This update for tigervnc provides the several fixes. These security issues were fixed: - CVE-2017-7392, CVE-2017-7396: Client can cause leak in VNC server (bsc#1031886) - CVE-2017-7395: Authenticated VNC client can crash VNC server (bsc#1031877) - CVE-2017-7394: Client can crash or block VNC server (bsc#1031879) - CVE-2017-7393: Authenticated client can cause double free in VNC server (bsc#1031875) - Prevent buffer overflow in VNC client, allowing for crashing the client (bnc#1032880) These non-security issues were fixed: - Prevent client disconnection caused by invalid cursor manipulation. (bsc#1024929, bsc#1031045) - Readd index.vnc. (bsc#1026833) - Crop operations to visible screen. (bnc#1032272)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse4 products
- tigervnc&distro=SUSE Linux Enterprise Desktop 12 SP2< 1.6.0-18.11.1
- tigervnc&distro=SUSE Linux Enterprise Server 12 SP2< 1.6.0-18.11.1
- tigervnc&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2< 1.6.0-18.11.1
- tigervnc&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 1.6.0-18.11.1
1 vendor · 4 products