PT-2019-5028 · Libvnc+5 · Libvncserver+5

Pavel Cheremushkin · Published 2019-12-20 · Updated 2025-01-24 · CVE-2019-15690

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LibVNCServer versions 0.9.12 and earlier

Description The issue is related to a heap buffer overflow in the HandleCursorShape() function in libvncclient/cursor.c. This can be exploited by an attacker sending cursor shapes with specially crafted dimensions, potentially allowing remote code execution when connected to a malicious server.

Recommendations For LibVNCServer versions 0.9.12 and earlier, consider disabling the HandleCursorShape() function until a patch is available to prevent potential remote code execution. Restrict access to the libvncclient/cursor.c module to minimize the risk of exploitation. Avoid using large cursor sizes when connected to untrusted servers. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2020-01661

CESA-2020_0913

CESA-2020_0920

CVE-2019-15690

DLA-2146-1

MGASA-2020-0164

OPENSUSE-SU-2020:0624-1

OPENSUSE-SU-2020_0624-1

OPENSUSE-SU-2024:10598-1

RHSA-2020:0913

RHSA-2020:0920

RHSA-2020:0921

RHSA-2020_0913

RHSA-2020_0920

SUSE-SU-2020:1164-1

SUSE-SU-2020:1164-2

SUSE-SU-2020:1165-1

SUSE-SU-2020:14355-1

USN-4407-1

Affected Products

Centos

Libvncserver

Linuxmint

Red Hat

Suse

Ubuntu

References · 51

• https://osv.dev/vulnerability/SUSE-SU-2020:14355-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-0920.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15680 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-15690 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01661 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2020:0624-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-18922 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15690 · Security Note
• https://ubuntu.com/security/CVE-2019-20788 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4407-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0164.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-15690 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/673316 · Security Note
• https://debian.org/lts/security/2020/dla-2146 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-15690 · Vendor Advisory