Vulnerabilities > Tigervnc > Tigervnc > 1.7.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-04-01 | CVE-2017-7394 | Improper Input Validation vulnerability in Tigervnc 1.7.1 In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames. | 5.0 |
| 2017-04-01 | CVE-2017-7393 | Double Free vulnerability in Tigervnc 1.7.1 In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution. | 6.5 |
| 2017-04-01 | CVE-2017-7392 | Missing Release of Resource after Effective Lifetime vulnerability in Tigervnc 1.7.1 In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server. | 5.0 |