A missing input sanitization flaw was found in the way TigerVNC handled credentials. A remote unauthenticated attacker could use this flaw to make Xvnc crash by sending specially crafted usernames, resulting in denial of service.
Find out more about CVE-2017-7394 from the MITRE CVE dictionary dictionary and NIST NVD.