CVE-2017-7392

7.5 highEPSS 1.7%

In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in the server.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-772
Published: 2017-04-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tigervnc:tigervnc

References

http://www.securityfocus.com/bid/97305
https://access.redhat.com/errata/RHSA-2017:2000
https://github.com/TigerVNC/tigervnc/pull/441
https://security.gentoo.org/glsa/201801-13
http://www.securityfocus.com/bid/97305

Check your stack JSON