Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:14549-1

Опубликовано: 26 нояб. 2020
Источник: suse-cvrf

Описание

Security update for LibVNCServer

This update for LibVNCServer fixes the following issues:

  • CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
LibVNCServer-0.9.1-160.22.1
SUSE Linux Enterprise Server 11 SP4-LTSS
LibVNCServer-0.9.1-160.22.1

Описание

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.


Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:LibVNCServer-0.9.1-160.22.1
SUSE Linux Enterprise Server 11 SP4-LTSS:LibVNCServer-0.9.1-160.22.1

Ссылки