A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvncserver-develUpgrade libvncserver | May 4, 2022 | Nov 27, 2020 |
| Alpine Linux | — | Upgrade libvncserver | Nov 27, 2020 | Nov 27, 2020 |
| Centos_linux | — | Upgrade libvncserver-debuginfoUpgrade libvncserverUpgrade libvncserver-debugsource | Jun 1, 2021 | Nov 27, 2020 |
| Debian | — | Upgrade libvncserver | Nov 17, 2020 | Nov 17, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvncserver | Feb 22, 2021 | Nov 27, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvncserver | Jan 20, 2021 | Nov 27, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libvncserver | Mar 24, 2021 | Nov 27, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvncserver | Feb 2, 2021 | Nov 27, 2020 |
| Oracle_linux | — | Upgrade libvncserver-develUpgrade libvncserver | May 26, 2021 | May 13, 2020 |
| Redhat_linux | — | Upgrade libvncserverNo solution existsUpgrade libvncserver-debugsourceUpgrade libvncserver-debuginfoUpgrade libvncserver-devel | May 21, 2021 | Nov 27, 2020 |
| Rocky_linux | — | Upgrade libvncserverUpgrade libvncserver-develUpgrade libvncserver-debuginfoUpgrade libvncserver-debugsource | Mar 12, 2024 | Nov 27, 2020 |
| Suse | — | Upgrade libvncclient0Upgrade LibVNCServerUpgrade LibVNCServer-develUpgrade libvncserver0 | Nov 27, 2020 | Nov 17, 2020 |
| Ubuntu | — | Upgrade vinoUpgrade libvncclient1Upgrade libvncserver1 | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub