PT-2020-2984 · Libvnc+4 · Libvncserver+4
Published
2019-08-30
·
Updated
2022-03-09
·
CVE-2020-14404
CVSS v2.0
5.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
LibVNCServer versions prior to 0.9.13
Description
An issue in libvncserver/rre.c allows out-of-bounds access via encodings, potentially enabling a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations
For versions prior to 0.9.13, update to version 0.9.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable libvncserver/rre.c component to minimize the risk of exploitation.
Fix
Buffer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Libvncserver
Linuxmint
Suse
Ubuntu