Home

CVE-2019-15680

Description

TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.684

Associated Vulnerability

VulnerabilityOS Platform
vnc server library (USN-4407-1) libvncclient1_0.9.11+dfsg-1ubuntu1.2_i386.debLinux
vnc server library (USN-4407-1) libvncclient1_0.9.11+dfsg-1ubuntu1.2_amd64.debLinux
vnc server library (USN-4407-1) libvncclient1_0.9.12+dfsg-9ubuntu0.1_i386.debLinux
vnc server library (USN-4407-1) libvncclient1_0.9.12+dfsg-9ubuntu0.1_amd64.debLinux
vnc server library (USN-4407-1) libvncclient1_0.9.11+dfsg-1.3ubuntu0.1_i386.debLinux
vnc server library (USN-4407-1) libvncclient1_0.9.11+dfsg-1.3ubuntu0.1_amd64.debLinux
vnc server library (USN-4407-1) libvncclient1_0.9.10+dfsg-3ubuntu0.16.04.4_i386.debLinux
vnc server library (USN-4407-1) libvncclient1_0.9.10+dfsg-3ubuntu0.16.04.4_amd64.debLinux
vnc server library (USN-4407-1) libvncserver1_0.9.11+dfsg-1ubuntu1.2_i386.debLinux
vnc server library (USN-4407-1) libvncserver1_0.9.11+dfsg-1ubuntu1.2_amd64.debLinux
vnc server library (USN-4407-1) libvncserver1_0.9.12+dfsg-9ubuntu0.1_i386.debLinux
vnc server library (USN-4407-1) libvncserver1_0.9.12+dfsg-9ubuntu0.1_amd64.debLinux
vnc server library (USN-4407-1) libvncserver1_0.9.11+dfsg-1.3ubuntu0.1_i386.debLinux
vnc server library (USN-4407-1) libvncserver1_0.9.11+dfsg-1.3ubuntu0.1_amd64.debLinux
vnc server library (USN-4407-1) libvncserver1_0.9.10+dfsg-3ubuntu0.16.04.4_i386.debLinux
vnc server library (USN-4407-1) libvncserver1_0.9.10+dfsg-3ubuntu0.16.04.4_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234