CVE-2017-7393

In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-04-01

Last modified

2024-08-05

Weaknesses

CWE-415

Affected products

• Tigervnc (Tigervnc)

References

• http://www.securityfocus.com/bid/97305
• https://access.redhat.com/errata/RHSA-2017:2000
• https://github.com/TigerVNC/tigervnc/pull/438
• https://security.gentoo.org/glsa/201801-13