Skip to content
OpenAdvisories
Unscored RHSA-2017:2000 7 CVEs

Red Hat Security Advisory: tigervnc and fltk security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 52

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client fltk 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client fltk-debuginfo 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client fltk-devel 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client fltk-fluid 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client fltk-static 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client tigervnc 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client tigervnc-debuginfo 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client tigervnc-icons 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client tigervnc-license 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client tigervnc-server 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client tigervnc-server-applet 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client tigervnc-server-minimal 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::client tigervnc-server-module 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode fltk 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode fltk-debuginfo 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode fltk-devel 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode fltk-fluid 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode fltk-static 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode tigervnc 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode tigervnc-debuginfo 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode tigervnc-icons 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode tigervnc-license 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode tigervnc-server 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode tigervnc-server-applet 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode tigervnc-server-minimal 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode tigervnc-server-module 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server fltk 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server fltk-debuginfo 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server fltk-devel 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server fltk-fluid 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server fltk-static 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server tigervnc 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server tigervnc-debuginfo 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server tigervnc-icons 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server tigervnc-license 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server tigervnc-server 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server tigervnc-server-applet 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server tigervnc-server-minimal 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::server tigervnc-server-module 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation fltk 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation fltk-debuginfo 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation fltk-devel 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation fltk-fluid 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation fltk-static 0:1.3.4-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation tigervnc 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation tigervnc-debuginfo 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation tigervnc-icons 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation tigervnc-license 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation tigervnc-server 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation tigervnc-server-applet 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation tigervnc-server-minimal 0:1.8.0-1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation tigervnc-server-module 0:1.8.0-1.el7

Vulnerabilities 7

  • Unscored —
    CVE-2016-10207

    The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by t…

    tigervnc Debian
  • Unscored —
    CVE-2017-5581

    Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execu…

    tigervnc Debian
  • Unscored —
    CVE-2017-7392

    In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a s…

    tigervnc Debian
  • Unscored —
    CVE-2017-7393

    In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, lead…

    tigervnc Debian
  • Unscored —
    CVE-2017-7394

    In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sendin…

    tigervnc Debian
  • Unscored —
    CVE-2017-7395

    In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated clie…

    tigervnc Debian
  • Unscored —
    CVE-2017-7396

    In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak i…

    tigervnc Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1343899
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1358090
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1388620
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1393971
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1410164
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1413598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1415547
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1415712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1418761
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1438694
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1438697
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1438700
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1438701
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1438703
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2000.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-10207
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-10207
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-10207
  • report
    https://access.redhat.com/security/cve/CVE-2017-5581
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-5581
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-5581
  • report
    https://access.redhat.com/security/cve/CVE-2017-7392
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7392
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7392
  • report
    https://access.redhat.com/security/cve/CVE-2017-7393
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7393
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7393
  • report
    https://access.redhat.com/security/cve/CVE-2017-7394
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7394
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7394
  • report
    https://access.redhat.com/security/cve/CVE-2017-7395
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7395
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7395
  • report
    https://access.redhat.com/security/cve/CVE-2017-7396
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7396
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7396