A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libvncserveralma-upgrade-libvncserver-devel | May 4, 2022 | Nov 27, 2020 | |
| Alpine Linux | alpine-linux-upgrade-libvncserver | Nov 27, 2020 | Nov 27, 2020 | |
| Centos_linux | — | centos-upgrade-libvncservercentos-upgrade-libvncserver-debuginfocentos-upgrade-libvncserver-debugsource | Jun 1, 2021 | Nov 27, 2020 |
| Debian | debian-upgrade-libvncserver | Nov 17, 2020 | Nov 17, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libvncserver | Feb 22, 2021 | Nov 27, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libvncserver | Jan 20, 2021 | Nov 27, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libvncserver | Mar 24, 2021 | Nov 27, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libvncserver | Feb 2, 2021 | Nov 27, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-libvncserveroracle-linux-upgrade-libvncserver-devel | May 26, 2021 | May 13, 2020 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libvncserverredhat-upgrade-libvncserver-debuginforedhat-upgrade-libvncserver-debugsourceredhat-upgrade-libvncserver-devel | May 21, 2021 | Nov 27, 2020 | |
| Rocky_linux | rocky-upgrade-libvncserverrocky-upgrade-libvncserver-debuginforocky-upgrade-libvncserver-debugsourcerocky-upgrade-libvncserver-devel | Mar 12, 2024 | Nov 27, 2020 | |
| Suse | — | suse-upgrade-libvncclient0suse-upgrade-libvncserversuse-upgrade-libvncserver-develsuse-upgrade-libvncserver0 | Nov 27, 2020 | Nov 17, 2020 |
| Ubuntu | ubuntu-upgrade-libvncclient1ubuntu-upgrade-libvncserver1ubuntu-upgrade-vino | Nov 18, 2020 | Nov 17, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub