CVE-2017-7394: Input Validation
In TigerVNC (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.
Upstream patches:
https://github.com/TigerVNC/tigervnc/pull/440/commits/62197c89e98be47a174074e4c7429c57767a4929 https://github.com/TigerVNC/tigervnc/pull/440/commits/9801c5efcf8c1774d9c807ebd5d27ac7049ad993
Other sources
In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TigerVNCto a version that resolves this vulnerability.Fixed in 1.7.1 - Compensating control
Apply the upstream TigerVNC fixes referenced by the two commits in pull request 440 (commits 62197c89e98be47a174074e4c7429c57767a4929 and 9801c5efcf8c1774d9c807ebd5d27ac7049ad993) to prevent unauthenticated long-username crashes in SSecurityPlain.cxx SSecurityPlain::processMsg.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7394?
CVE-2017-7394 is classified as a medium severity vulnerability due to its potential to allow a denial of service attack.
How do I fix CVE-2017-7394?
To fix CVE-2017-7394, upgrade to the patched version of TigerVNC that addresses this vulnerability.
Which versions of TigerVNC are affected by CVE-2017-7394?
CVE-2017-7394 affects TigerVNC version 1.7.1.
What type of attack does CVE-2017-7394 enable?
CVE-2017-7394 enables unauthenticated denial of service attacks by crashing the server with long usernames.
Is user authentication required to exploit CVE-2017-7394?
No, CVE-2017-7394 can be exploited by unauthenticated users.