PT-2016-3303 · Libvncserver Team+3 · Libvncserver+3
Josef Gajdusek
·
Publicado
2016-11-24
·
Atualizado
2020-10-23
·
CVE-2016-9942
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
LibVNCServer versions prior to 0.9.11
Description
The issue is related to a heap-based buffer overflow in the ultra.c component of LibVNCServer. This can be exploited by remote servers via a crafted FramebufferUpdate message with the Ultra type tile, where the LZO payload decompressed length exceeds the tile dimensions. The exploitation may lead to a denial of service, causing the application to crash, or possibly allow the execution of arbitrary code. The vulnerability can also be used to gain unauthorized access to confidential data.
Recommendations
For versions prior to 0.9.11, update to version 0.9.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the ultra.c component until a patch is available. Avoid using the Ultra type tile in FramebufferUpdate messages until the issue is resolved.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Libvncserver
Suse
Ubuntu