CVE-2019-15681
Description
LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.
Risk Information
Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
6.191
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| SUSE-SU-2020:0955-1(SUSE Linux Enterprise Server 12-SP4 ) vino-3.20.2-7.3.21.x86_64.rpm | Linux |
| SUSE-SU-2020:0955-1(SUSE Linux Enterprise Server 12-SP5 ) vino-3.20.2-7.3.21.x86_64_SP5.rpm | Linux |
| SUSE-SU-2020:0955-1(SUSE Linux Enterprise Server 12-SP4 ) vino-debuginfo-3.20.2-7.3.21.x86_64.rpm | Linux |
| SUSE-SU-2020:0955-1(SUSE Linux Enterprise Server 12-SP5 ) vino-debuginfo-3.20.2-7.3.21.x86_64_SP5.rpm | Linux |
| SUSE-SU-2020:0955-1(SUSE Linux Enterprise Server 12-SP4 ) vino-debugsource-3.20.2-7.3.21.x86_64.rpm | Linux |
| SUSE-SU-2020:0955-1(SUSE Linux Enterprise Server 12-SP5 ) vino-debugsource-3.20.2-7.3.21.x86_64_SP5.rpm | Linux |
| SUSE-SU-2020:0955-1(SUSE Linux Enterprise Server 12-SP4 ) vino-lang-3.20.2-7.3.21.noarch.rpm | Linux |
| SUSE-SU-2020:0955-1(SUSE Linux Enterprise Server 12-SP5 ) vino-lang-3.20.2-7.3.21.noarch_SP5.rpm | Linux |
| SUSE-SU-2020:1165-1(SUSE Linux Enterprise Server 12-SP5 ) libvncclient0-0.9.9-17.19.1.x86_64.rpm | Linux |
| SUSE-SU-2020:1165-1(SUSE Linux Enterprise Server 12-SP4 ) libvncclient0-0.9.9-17.19.1.x86_64_SP4.rpm | Linux |
| SUSE-SU-2020:1165-1(SUSE Linux Enterprise Server 12-SP5 ) libvncclient0-debuginfo-0.9.9-17.19.1.x86_64.rpm | Linux |
| SUSE-SU-2020:1165-1(SUSE Linux Enterprise Server 12-SP4 ) libvncclient0-debuginfo-0.9.9-17.19.1.x86_64_SP4.rpm | Linux |
| SUSE-SU-2020:1165-1(SUSE Linux Enterprise Server 12-SP5 ) LibVNCServer-debugsource-0.9.9-17.19.1.x86_64.rpm | Linux |
| SUSE-SU-2020:1165-1(SUSE Linux Enterprise Server 12-SP4 ) LibVNCServer-debugsource-0.9.9-17.19.1.x86_64_SP4.rpm | Linux |
| SUSE-SU-2020:1165-1(SUSE Linux Enterprise Server 12-SP5 ) libvncserver0-0.9.9-17.19.1.x86_64.rpm | Linux |
| SUSE-SU-2020:1165-1(SUSE Linux Enterprise Server 12-SP4 ) libvncserver0-0.9.9-17.19.1.x86_64_SP4.rpm | Linux |
| SUSE-SU-2020:1165-1(SUSE Linux Enterprise Server 12-SP5 ) libvncserver0-debuginfo-0.9.9-17.19.1.x86_64.rpm | Linux |
| SUSE-SU-2020:1165-1(SUSE Linux Enterprise Server 12-SP4 ) libvncserver0-debuginfo-0.9.9-17.19.1.x86_64_SP4.rpm | Linux |
| VNC server for GNOME (USN-4573-1) vino_3.8.1-0ubuntu9.3_i386.deb | Linux |
| VNC server for GNOME (USN-4573-1) vino_3.8.1-0ubuntu9.3_amd64.deb | Linux |
| VNC server for GNOME (USN-4573-1) vino_3.22.0-3ubuntu1.1_i386.deb | Linux |
| VNC server for GNOME (USN-4573-1) vino_3.22.0-3ubuntu1.1_amd64.deb | Linux |
| VNC server for GNOME (USN-4573-1) vino_3.22.0-5ubuntu2.1_amd64.deb | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) italc-client_2.0.2+dfsg1-4ubuntu0.1_i386.deb | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) italc-client_2.0.2+dfsg1-4ubuntu0.1_amd64.deb | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) italc-master_2.0.2+dfsg1-4ubuntu0.1_i386.deb | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) italc-master_2.0.2+dfsg1-4ubuntu0.1_amd64.deb | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) libitalccore_2.0.2+dfsg1-4ubuntu0.1_i386.deb | Linux |
| didact tool which allows teachers to view and control computer labs (USN-4587-1) libitalccore_2.0.2+dfsg1-4ubuntu0.1_amd64.deb | Linux |
| vnc server library (USN-4407-1) libvncclient1_0.9.11+dfsg-1ubuntu1.2_i386.deb | Linux |
| vnc server library (USN-4407-1) libvncclient1_0.9.11+dfsg-1ubuntu1.2_amd64.deb | Linux |
| vnc server library (USN-4407-1) libvncclient1_0.9.12+dfsg-9ubuntu0.1_i386.deb | Linux |
| vnc server library (USN-4407-1) libvncclient1_0.9.12+dfsg-9ubuntu0.1_amd64.deb | Linux |
| vnc server library (USN-4407-1) libvncclient1_0.9.11+dfsg-1.3ubuntu0.1_i386.deb | Linux |
| vnc server library (USN-4407-1) libvncclient1_0.9.11+dfsg-1.3ubuntu0.1_amd64.deb | Linux |
| vnc server library (USN-4407-1) libvncclient1_0.9.10+dfsg-3ubuntu0.16.04.4_i386.deb | Linux |
| vnc server library (USN-4407-1) libvncclient1_0.9.10+dfsg-3ubuntu0.16.04.4_amd64.deb | Linux |
| vnc server library (USN-4407-1) libvncserver1_0.9.11+dfsg-1ubuntu1.2_i386.deb | Linux |
| vnc server library (USN-4407-1) libvncserver1_0.9.11+dfsg-1ubuntu1.2_amd64.deb | Linux |
| vnc server library (USN-4407-1) libvncserver1_0.9.12+dfsg-9ubuntu0.1_i386.deb | Linux |
| vnc server library (USN-4407-1) libvncserver1_0.9.12+dfsg-9ubuntu0.1_amd64.deb | Linux |
| vnc server library (USN-4407-1) libvncserver1_0.9.11+dfsg-1.3ubuntu0.1_i386.deb | Linux |
| vnc server library (USN-4407-1) libvncserver1_0.9.11+dfsg-1.3ubuntu0.1_amd64.deb | Linux |
| vnc server library (USN-4407-1) libvncserver1_0.9.10+dfsg-3ubuntu0.16.04.4_i386.deb | Linux |
| vnc server library (USN-4407-1) libvncserver1_0.9.10+dfsg-3ubuntu0.16.04.4_amd64.deb | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234