Lucene search
Gentoo FoundationMGASA-2022-0363HistoryOct 08, 2022 - 11:22 p.m.
Updated libvncserver packages fix security vulnerability
2022-10-0823:22:22
Gentoo Foundation
advisories.mageia.org
25
libvncserver memory leak unix cve-2020-29260 fix security
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.2%
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup(). (CVE-2020-29260)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | libvncserver | < 0.9.13-1.1 | libvncserver-0.9.13-1.1.mga8 |
| Mageia | 8 | noarch | italc | < 3.0.3-6.1 | italc-3.0.3-6.1.mga8 |
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0363)
2022-10-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4330-1)
2022-12-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3990-1)
2022-11-16 00:00:00
ubuntucve
ubuntucve
CVE-2020-29260
2022-09-02 00:00:00
suse
suse
Security update for LibVNCServer (moderate)
2022-10-06 00:00:00
prion
prion
Memory corruption
2022-09-02 23:15:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : LibVNCServer (SUSE-SU-2022:3540-1)
2022-10-07 00:00:00
SUSE SLED15 / SLES15 Security Update : LibVNCServer (SUSE-SU-2022:3990-1)
2022-11-16 00:00:00
SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2022:4330-1)
2022-12-07 00:00:00
cvelist
cvelist
CVE-2020-29260
2022-09-02 22:14:35
amazon
amazon
Low: libvncserver
2023-07-20 17:29:00
veracode
veracode
Denial Of Service (DoS)
2022-09-05 05:53:35
nvd
nvd
CVE-2020-29260
2022-09-02 23:15:08
alpinelinux
alpinelinux
CVE-2020-29260
2022-09-02 23:15:08
redhatcve
redhatcve
CVE-2020-29260
2022-09-05 05:58:55
cve
cve
CVE-2020-29260
2022-09-02 23:15:08
redos
redos
ROS-20240827-02
2024-08-27 00:00:00
osv
osv
CVE-2020-29260
2022-09-02 23:15:08
libvncserver - security update
2022-09-30 00:00:00
debiancve
debiancve
CVE-2020-29260
2022-09-02 23:15:08
debian
debian
[SECURITY] [DLA 3125-1] libvncserver security update
2022-09-29 22:14:33
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.2%
Related for MGASA-2022-0363