CVE-2019-20788

CRITICAL9.8

libvncclient/cursor

Published Apr 23, 2020

Modified 1 years ago

Details

libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690.

References

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00027.html

WEB

https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf

WEB

https://github.com/LibVNC/libvncserver/commit/54220248886b5001fbbb9fa73c4e1a2cb9413fed

WEB

https://securitylab.github.com/advisories/GHSL-2020-064-libvnc-libvncclient

ADVISORY

https://usn.ubuntu.com/4407-1/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2019-20788

CVSS Analysis

CVSS v3.1

9.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedApr 23, 2020

ModifiedAug 5, 2024

CVE-2019-20788 | Mondoo Vulnerability Intelligence