Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201908-05
HistoryAug 09, 2019 - 12:00 a.m.

LibVNCServer: Multiple vulnerabilities

2019-08-0900:00:00
Gentoo Foundation
security.gentoo.org
43

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.132

Percentile

95.6%

JSON

Background

LibVNCServer/LibVNCClient are cross-platform C libraries that allow you to easily implement VNC server or client functionality in your program.

Description

Multiple vulnerabilities have been discovered in LibVNCServer. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All LibVNCServer users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-libs/libvncserver-0.9.12"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-libs/libvncserver< 0.9.12UNKNOWN

Related

nessus 43
gentoo 1
openvas 33
osv 20
debian 9
suse 4
ubuntu 5
mageia 3
veracode 8
ubuntucve 10
cvelist 9
prion 9
nvd 9
redhatcve 9
debiancve 9
cve 9
centos 1
fedora 3
amazon 1
redhat 1
oraclelinux 1
alpinelinux 1
rosalinux 1
nessus
nessus
GLSA-201908-05 : LibVNCServer: Multiple vulnerabilities
2019-08-12 00:00:00
GLSA-202006-06 : ssvnc: Multiple vulnerabilities
2020-06-17 00:00:00
Debian DLA-2016-1 : ssvnc security update
2019-12-03 00:00:00
gentoo
gentoo
ssvnc: Multiple vulnerabilities
2020-06-13 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2016-1)
2019-11-30 00:00:00
openSUSE: Security Advisory for LibVNCServer (openSUSE-SU-2019:0045-1)
2019-01-12 00:00:00
openSUSE: Security Advisory for LibVNCServer (openSUSE-SU-2019:0053-1)
2019-01-18 00:00:00
osv
osv
ssvnc - security update
2019-11-29 00:00:00
libvncserver - security update
2018-12-25 00:00:00
ssvnc vulnerabilities
2020-09-28 19:52:43
debian
debian
[SECURITY] [DLA 2016-1] ssvnc security update
2019-11-29 15:53:54
[SECURITY] [DLA 1617-1] libvncserver security update
2018-12-27 03:53:08
[SECURITY] [DSA 4383-1] libvncserver security update
2019-02-03 20:52:03
suse
suse
Security update for LibVNCServer (important)
2019-01-18 00:00:00
Security update for LibVNCServer (important)
2019-01-12 00:00:00
Security update for LibVNCServer (important)
2018-03-27 21:07:39
ubuntu
ubuntu
SSVNC vulnerabilities
2020-09-28 00:00:00
iTALC vulnerabilities
2020-09-28 00:00:00
LibVNCServer vulnerabilities
2019-01-31 00:00:00
mageia
mageia
Updated libvncserver & x11vnc packages fix security vulnerabilities
2019-01-16 01:15:34
Updated italc packages fix security vulnerabilities
2020-11-23 22:51:37
Updated libvncserver packages fix security vulnerability
2018-04-09 00:37:49
veracode
veracode
Remote Code Execution
2020-09-29 03:51:12
Information Disclosure Through Memory Leak
2018-12-27 07:17:40
Denial Of Service (DoS)
2018-12-27 07:36:22
ubuntucve
ubuntucve
CVE-2018-20020
2018-12-19 00:00:00
CVE-2018-20023
2018-12-19 00:00:00
CVE-2018-20021
2018-12-19 00:00:00
cvelist
cvelist
CVE-2018-20023
2018-12-19 16:00:00
CVE-2018-20022
2018-12-19 16:00:00
CVE-2018-20024
2018-12-19 16:00:00
prion
prion
Information disclosure
2018-12-19 16:29:00
Null pointer dereference
2018-12-19 16:29:00
Heap overflow
2018-12-19 16:29:00
nvd
nvd
CVE-2018-20024
2018-12-19 16:29:00
CVE-2018-20020
2018-12-19 16:29:00
CVE-2018-20023
2018-12-19 16:29:00
redhatcve
redhatcve
CVE-2018-20023
2018-12-20 07:50:26
CVE-2018-20024
2018-12-20 07:49:26
CVE-2018-20020
2018-12-20 07:19:59
debiancve
debiancve
CVE-2018-20024
2018-12-19 16:29:00
CVE-2018-20023
2018-12-19 16:29:00
CVE-2018-20022
2018-12-19 16:29:00
cve
cve
CVE-2018-20023
2018-12-19 16:29:00
CVE-2018-20022
2018-12-19 16:29:00
CVE-2018-20021
2018-12-19 16:29:00
centos
centos
libvncserver security update
2018-05-30 18:24:07
fedora
fedora
[SECURITY] Fedora 27 Update: libvncserver-0.9.11-5.fc27
2018-03-27 20:18:22
[SECURITY] Fedora 26 Update: libvncserver-0.9.11-3.fc26
2018-04-03 14:25:24
[SECURITY] Fedora 28 Update: libvncserver-0.9.11-6.fc28
2018-03-30 13:40:02
amazon
amazon
Medium: libvncserver
2018-05-10 17:21:00
redhat
redhat
(RHSA-2018:1055) Moderate: libvncserver security update
2018-04-10 08:05:00
oraclelinux
oraclelinux
libvncserver security update
2018-04-17 00:00:00
alpinelinux
alpinelinux
CVE-2018-7225
2018-02-19 15:29:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1900
2021-07-02 17:22:34

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.132

Percentile

95.6%

JSON
Related for GLSA-201908-05
nessus43gentoo1openvas33osv20debian9suse4ubuntu5mageia3veracode8ubuntucve10cvelist9prion9nvd9redhatcve9debiancve9cve9centos1fedora3amazon1redhat1oraclelinux1alpinelinux1rosalinux1