Lucene search
PRIOn knowledge basePRION:CVE-2019-8259HistoryMar 05, 2019 - 3:29 p.m.
Information disclosure
2019-03-0515:29:00
PRIOn knowledge base
www.prio-n.com
3
UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1199.
References
cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf
cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-005-ultravnc-memory-leak/
us-cert.cisa.gov/ics/advisories/icsa-21-131-11
www.us-cert.gov/ics/advisories/icsa-20-161-06
Related
nvd
nvd
CVE-2019-8259
2019-03-05 15:29:00
cve
cve
CVE-2019-8259
2019-03-05 15:29:00
cvelist
cvelist
CVE-2019-8259
2019-03-01 00:00:00
ics
ics
Siemens SIMATIC UltraVNC HMI WinCC Products
2021-05-11 12:00:00
Siemens SINAMICS Medium Voltage Products Remote Access (Update B)
2021-08-10 12:00:00
Siemens SINUMERIK
2020-06-12 12:00:00