Integer overflow

🗓️ 28 Feb 2017 18:59:00Reported by PRIOn knowledge baseType

Multiple integer overflows in vnc_connection_server_message and vnc_color_map_set functions in gtk-vnc before 0.7.0 allowing remote servers to cause denial of service or possible code execution via vectors involving SetColorMapEntries, triggering buffer overflow

Reporter	Title	Published	Views	Family All 62
FreeBSD	gtk-vnc -- bounds checking vulnerabilities	9 Feb 201700:00	–	freebsd
AlpineLinux	CVE-2017-5885	28 Feb 201718:00	–	alpinelinux
Tenable Nessus	CentOS 7 : gtk-vnc (CESA-2017:2258)	25 Aug 201700:00	–	nessus
Tenable Nessus	Debian DLA-831-1 : gtk-vnc security update	21 Feb 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : gtk-vnc (EulerOS-SA-2017-1181)	8 Sep 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : gtk-vnc (EulerOS-SA-2017-1182)	8 Sep 201700:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : gtk-vnc (EulerOS-SA-2020-2010)	29 Sep 202000:00	–	nessus
Tenable Nessus	Fedora 24 : mingw-gtk-vnc (2017-404f1a29fc)	9 Mar 201700:00	–	nessus
Tenable Nessus	Fedora 24 : gtk-vnc (2017-a9e6a5c249)	6 Mar 201700:00	–	nessus
Tenable Nessus	Fedora 25 : gtk-vnc (2017-ab04a91edd)	15 Feb 201700:00	–	nessus

Source	Link
git	www.git.gnome.org/browse/gtk-vnc/commit/
bugzilla	www.bugzilla.gnome.org/show_bug.cgi
securityfocus	www.securityfocus.com/bid/96016
openwall	www.openwall.com/lists/oss-security/2017/02/05/5
openwall	www.openwall.com/lists/oss-security/2017/02/03/5
access	www.access.redhat.com/errata/RHSA-2017:2258
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LGPQ5MQR6SN4DYTEFACHP2PP5RR26KYK/

12 Feb 2023 23:29Current

9.7High risk

Vulners AI Score9.7

EPSS0.04985