CVE-2017-5581: Buffer Overflow
A buffer overflow vulnerability in ModifiablePixelBuffer::fillRect in vncviewer was found allowing malicious VNC server to send crafted RRE message and possibly take control of the TigerVNC viewer.
Upstream patch:
https://github.com/TigerVNC/tigervnc/commit/18c020124ff1b2441f714da2017f63dba50720ba
PR:
https://github.com/TigerVNC/tigervnc/pull/399
Reference:
http://seclists.org/oss-sec/2017/q1/166
Other sources
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via an RRE message with subrectangle outside framebuffer boundaries.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/tigervncto a version that resolves this vulnerability.Fixed in 1.7.1 - Upgrade
Upgrade
TigerVNC/tigervnc (vncviewer)to a version that resolves this vulnerability.Fixed in 1.7.1Patch Upstream patch - Upgrade
Upgrade
TigerVNC/tigervncto a version that resolves this vulnerability.Patch 18c020124ff1b2441f714da2017f63dba50720ba
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5581?
CVE-2017-5581 is classified as a high-severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2017-5581?
To fix CVE-2017-5581, update the TigerVNC package to version 1.7.1 or later.
Which versions of TigerVNC are affected by CVE-2017-5581?
CVE-2017-5581 affects TigerVNC versions prior to 1.7.1.
Can CVE-2017-5581 be exploited remotely?
Yes, CVE-2017-5581 can be exploited by a malicious VNC server sending crafted RRE messages to the viewer.
What is the impact of CVE-2017-5581?
The impact of CVE-2017-5581 includes potential complete compromise of the TigerVNC viewer, allowing an attacker to take control.