Описание
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1:3.0.3+dfsg1-3ubuntu0.1 |
| devel | DNE | |
| esm-apps-legacy/xenial | released | 1:2.0.2+dfsg1-4ubuntu0.1 |
| esm-apps/bionic | released | 1:3.0.3+dfsg1-3ubuntu0.1 |
| esm-apps/xenial | released | 1:2.0.2+dfsg1-4ubuntu0.1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| esm-infra/focal | DNE | |
| focal | DNE | |
| groovy | DNE | |
| hirsute | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 0.9.11+dfsg-1ubuntu0.1 |
| bionic | released | 0.9.11+dfsg-1ubuntu0.1 |
| devel | released | 0.9.11+dfsg-1ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [0.9.9+dfsg-1ubuntu1.3]] |
| esm-infra-legacy/xenial | released | 0.9.10+dfsg-3ubuntu0.16.04.2 |
| esm-infra/bionic | released | 0.9.11+dfsg-1ubuntu0.1 |
| esm-infra/focal | released | 0.9.11+dfsg-1ubuntu0.1 |
| esm-infra/xenial | released | 0.9.10+dfsg-3ubuntu0.16.04.2 |
| focal | released | 0.9.11+dfsg-1ubuntu0.1 |
| groovy | released | 0.9.11+dfsg-1ubuntu1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | needs-triage | |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | needs-triage | |
| esm-apps/jammy | needs-triage | |
| esm-apps/noble | needs-triage | |
| esm-apps/resolute | needs-triage | |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| esm-infra-legacy/trusty | released | 1.3.9-6.5+deb8u1build0.14.04.1~esm1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 3.22.0-3ubuntu1.1 |
| devel | DNE | |
| esm-apps/jammy | released | 3.22.0-6ubuntu1 |
| esm-apps/noble | released | 3.22.0-6ubuntu1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra-legacy/xenial | released | 3.8.1-0ubuntu9.3 |
| esm-infra/bionic | released | 3.22.0-3ubuntu1.1 |
| esm-infra/focal | released | 3.22.0-5ubuntu2.1 |
| esm-infra/xenial | released | 3.8.1-0ubuntu9.3 |
| focal | released | 3.22.0-5ubuntu2.1 |
Показывать по
Ссылки на источники
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClie ...
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3