Описание
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues:
- CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.2
LibVNCServer-devel-0.9.10-lp152.9.8.1
libvncclient0-0.9.10-lp152.9.8.1
libvncserver0-0.9.10-lp152.9.8.1
Ссылки
- E-Mail link for openSUSE-SU-2020:2025-1
- SUSE Security Ratings
- SUSE Bug 1178682
- SUSE CVE CVE-2020-25708 page
Описание
A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.
Затронутые продукты
openSUSE Leap 15.2:LibVNCServer-devel-0.9.10-lp152.9.8.1
openSUSE Leap 15.2:libvncclient0-0.9.10-lp152.9.8.1
openSUSE Leap 15.2:libvncserver0-0.9.10-lp152.9.8.1
Ссылки
- CVE-2020-25708
- SUSE Bug 1178682