Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-5581
HistoryFeb 28, 2017 - 6:59 p.m.

CVE-2017-5581

2017-02-2818:59:00
CWE-119
[email protected]
web.nvd.nist.gov
39
cve-2017-5581
buffer overflow
modifiablepixelbuffer
tigervnc
remote code execution
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.3%

JSON

Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.

Affected configurations

NVD
Node
tigervnctigervncRange≤1.7
CPENameOperatorVersion
tigervnc:tigervnctigervncle1.7

Related

nessus 13
prion 1
redhatcve 1
osv 1
cvelist 1
ubuntucve 1
nvd 1
veracode 1
gentoo 1
debiancve 1
oraclelinux 2
centos 2
openvas 4
redhat 2
ibm 1
amazon 1
nessus
nessus
GLSA-201702-19 : TigerVNC: Buffer overflow
2017-02-21 00:00:00
NewStart CGSL MAIN 4.05 : tigervnc Multiple Vulnerabilities (NS-SA-2019-0106)
2019-08-12 00:00:00
Scientific Linux Security Update : tigervnc on SL6.x i386/x86_64 (20170321)
2017-04-06 00:00:00
prion
prion
Buffer overflow
2017-02-28 18:59:00
redhatcve
redhatcve
CVE-2017-5581
2019-10-11 16:47:30
osv
osv
CVE-2017-5581
2017-02-28 18:59:00
cvelist
cvelist
CVE-2017-5581
2017-02-28 18:00:00
ubuntucve
ubuntucve
CVE-2017-5581
2017-02-28 00:00:00
nvd
nvd
CVE-2017-5581
2017-02-28 18:59:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:51:54
gentoo
gentoo
TigerVNC: Buffer overflow
2017-02-20 00:00:00
debiancve
debiancve
CVE-2017-5581
2017-02-28 18:59:00
oraclelinux
oraclelinux
tigervnc security and bug fix update
2017-03-27 00:00:00
tigervnc and fltk security, bug fix, and enhancement update
2017-08-07 00:00:00
centos
centos
tigervnc security update
2017-03-24 15:45:43
fltk, tigervnc security update
2017-08-24 01:37:02
openvas
openvas
RedHat Update for tigervnc RHSA-2017:0630-01
2017-03-22 00:00:00
Huawei EulerOS: Security Advisory for tigervnc (EulerOS-SA-2017-1228)
2020-01-23 00:00:00
RedHat Update for tigervnc and fltk RHSA-2017:2000-01
2017-08-04 00:00:00
redhat
redhat
(RHSA-2017:0630) Moderate: tigervnc security and bug fix update
2017-03-21 06:17:44
(RHSA-2017:2000) Moderate: tigervnc and fltk security, bug fix, and enhancement update
2017-08-01 05:57:15
ibm
ibm
Security Bulletin: Vulnerabilities in TigerVNC affect PowerKVM
2018-06-18 01:38:06
amazon
amazon
Medium: tigervnc
2017-08-31 15:56:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.3%

JSON
Related for CVE-2017-5581
nessus13prion1redhatcve1osv1cvelist1ubuntucve1nvd1veracode1gentoo1debiancve1oraclelinux2centos2openvas4redhat2ibm1amazon1