Lucene search
Veracode Vulnerability DatabaseVERACODE:25701HistoryJun 18, 2020 - 3:26 a.m.
Denial Of Service (DoS)
2020-06-1803:26:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
EPSS
0.008
Percentile
81.4%
libvncserver.so is vulnerable to denial of service(DoS) attack. The issue exists as an out-of-bounds access from the encoding function in libvncserver/sockets.c.
References
lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html
lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html
lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html
cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
github.com/LibVNC/libvncserver/commit/57433015f856cc12753378254ce4f1c78f5d9c7b
github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13
usn.ubuntu.com/4434-1/
Related
ubuntucve
ubuntucve
CVE-2020-14398
2020-06-17 00:00:00
nvd
nvd
CVE-2020-14398
2020-06-17 16:15:11
redhatcve
redhatcve
CVE-2020-14398
2020-07-24 11:07:45
prion
prion
Code injection
2020-06-17 16:15:00
debiancve
debiancve
CVE-2020-14398
2020-06-17 16:15:11
cve
cve
CVE-2020-14398
2020-06-17 16:15:11
osv
osv
CVE-2020-14398
2020-06-17 16:15:11
cvelist
cvelist
CVE-2020-14398
2020-06-17 15:13:21
alpinelinux
alpinelinux
CVE-2020-14398
2020-06-17 16:15:00
nessus
nessus
SUSE SLES11 Security Update : LibVNCServer (SUSE-SU-2020:14424-1)
2021-06-10 00:00:00
openSUSE Security Update : LibVNCServer (openSUSE-2020-1056)
2020-07-27 00:00:00
openSUSE Security Update : LibVNCServer (openSUSE-2020-1025)
2020-07-22 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:14424-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2020-0280)
2022-01-28 00:00:00
openSUSE: Security Advisory for LibVNCServer (openSUSE-SU-2020:1025-1)
2020-07-22 00:00:00
suse
suse
Security update for LibVNCServer (important)
2020-07-21 00:00:00
Security update for LibVNCServer (important)
2020-07-24 00:00:00
Security update for LibVNCServer (important)
2020-07-18 00:00:00
mageia
mageia
Updated libvncserver packages fix security vulnerability
2020-07-05 22:48:23
virtuozzo
virtuozzo
Product update: Virtuozzo Hybrid Server 7.0 Update 14 Hotfix 2 (7.0.14-258)
2020-08-19 00:00:00
ubuntu
ubuntu
LibVNCServer vulnerabilities
2020-07-23 00:00:00
ics
ics
Siemens SIMATIC ITC
2021-12-16 12:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1900
2021-07-02 17:22:34