CVE-2017-5581

EUVD-2017-14682
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
tigervnctigervnc
𝑥
≤ 1.7
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tigervnc
bookworm
1.12.0+dfsg-8
fixed
bullseye
1.11.0+dfsg-2+deb11u1
fixed
sid
1.13.1+dfsg-3
fixed
trixie
1.13.1+dfsg-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tigervnc
artful
ignored
bionic
not-affected
cosmic
not-affected
precise
dne
trusty
dne
xenial
dne
yakkety
dne
zesty
ignored
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2017-0630.html
http://www.openwall.com/lists/oss-security/2017/01/22/1
http://www.openwall.com/lists/oss-security/2017/01/25/6
http://www.securityfocus.com/bid/95789
https://access.redhat.com/errata/RHSA-2017:2000
https://github.com/TigerVNC/tigervnc/commit/18c020124ff1b2441f714da2017f63dba50720ba
https://github.com/TigerVNC/tigervnc/pull/399
https://github.com/TigerVNC/tigervnc/releases/tag/v1.7.1
https://security.gentoo.org/glsa/201702-19
http://rhn.redhat.com/errata/RHSA-2017-0630.html
http://www.openwall.com/lists/oss-security/2017/01/22/1
http://www.openwall.com/lists/oss-security/2017/01/25/6
http://www.securityfocus.com/bid/95789
https://access.redhat.com/errata/RHSA-2017:2000
https://github.com/TigerVNC/tigervnc/commit/18c020124ff1b2441f714da2017f63dba50720ba
https://github.com/TigerVNC/tigervnc/pull/399
https://github.com/TigerVNC/tigervnc/releases/tag/v1.7.1
https://security.gentoo.org/glsa/201702-19