Lucene search
RedosROS-20240827-02HistoryAug 27, 2024 - 12:00 a.m.
ROS-20240827-02
2024-08-2700:00:00
redos.red-soft.ru
3
memory leak
remote exploitation
denial of service
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.6
Confidence
Low
Vulnerability of rfbClientCleanup() function of libvncclient component of LibVNCServer cross-platform library
is related to a memory leak. Exploitation of the vulnerability could allow an attacker acting remotely,
cause a denial of service
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| redos | 7.3 | x86_64 | libvncserver | < 0.9.13-17 | UNKNOWN |
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0363)
2022-10-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4330-1)
2022-12-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3990-1)
2022-11-16 00:00:00
suse
suse
Security update for LibVNCServer (moderate)
2022-10-06 00:00:00
ubuntucve
ubuntucve
CVE-2020-29260
2022-09-02 00:00:00
prion
prion
Memory corruption
2022-09-02 23:15:00
mageia
mageia
Updated libvncserver packages fix security vulnerability
2022-10-08 23:22:22
nessus
nessus
SUSE SLED15 / SLES15 Security Update : LibVNCServer (SUSE-SU-2022:3990-1)
2022-11-16 00:00:00
SUSE SLED15 / SLES15 Security Update : LibVNCServer (SUSE-SU-2022:3540-1)
2022-10-07 00:00:00
SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2022:4330-1)
2022-12-07 00:00:00
cvelist
cvelist
CVE-2020-29260
2022-09-02 22:14:35
amazon
amazon
Low: libvncserver
2023-07-20 17:29:00
veracode
veracode
Denial Of Service (DoS)
2022-09-05 05:53:35
nvd
nvd
CVE-2020-29260
2022-09-02 23:15:08
alpinelinux
alpinelinux
CVE-2020-29260
2022-09-02 23:15:08
redhatcve
redhatcve
CVE-2020-29260
2022-09-05 05:58:55
cve
cve
CVE-2020-29260
2022-09-02 23:15:08
osv
osv
CVE-2020-29260
2022-09-02 23:15:08
libvncserver - security update
2022-09-30 00:00:00
debiancve
debiancve
CVE-2020-29260
2022-09-02 23:15:08
debian
debian
[SECURITY] [DLA 3125-1] libvncserver security update
2022-09-29 22:14:33
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.6
Confidence
Low
Related for ROS-20240827-02