An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvncserver | Aug 7, 2020 | Jun 17, 2020 |
| Debian | — | Upgrade libvncserver | Jul 2, 2020 | Jun 17, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvncserver | Nov 3, 2020 | Jun 17, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvncserver | Sep 28, 2020 | Jun 17, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libvncserver-develUpgrade libvncserver | Sep 3, 2020 | Jun 17, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvncserver | Jul 31, 2020 | Jun 17, 2020 |
| Suse | — | Upgrade LibVNCServerUpgrade libvncclient0Upgrade libvncserver0Upgrade LibVNCServer-devel | Jul 18, 2020 | Jun 17, 2020 |
| Ubuntu | — | Upgrade libvncclient1Upgrade libvncserver1 | Aug 5, 2020 | Jun 17, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub