Home

CVE-2019-15691

Description

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack unwinding. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.

Risk Information

Base Score
7.2
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
3.872

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2020:1497) tigervnc security update tigervnc-1.9.0-14.el8_1.x86_64.rpmLinux
(RHSA-2020:1497) tigervnc security update tigervnc-debugsource-1.9.0-14.el8_1.x86_64.rpmLinux
(RHSA-2020:1497) tigervnc security update tigervnc-icons-1.9.0-14.el8_1.noarch.rpmLinux
(RHSA-2020:1497) tigervnc security update tigervnc-license-1.9.0-14.el8_1.noarch.rpmLinux
(RHSA-2020:1497) tigervnc security update tigervnc-server-1.9.0-14.el8_1.x86_64.rpmLinux
(RHSA-2020:1497) tigervnc security update tigervnc-server-applet-1.9.0-14.el8_1.noarch.rpmLinux
(RHSA-2020:1497) tigervnc security update tigervnc-server-minimal-1.9.0-14.el8_1.x86_64.rpmLinux
(RHSA-2020:1497) tigervnc security update tigervnc-server-module-1.9.0-14.el8_1.x86_64.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP5 ) libXvnc1-1.6.0-22.14.1.x86_64.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP4 ) libXvnc1-1.6.0-22.14.1.x86_64_SP4.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP5 ) libXvnc1-debuginfo-1.6.0-22.14.1.x86_64.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP4 ) libXvnc1-debuginfo-1.6.0-22.14.1.x86_64_SP4.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP4 ) tigervnc-1.6.0-22.14.1.x86_64.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP4 ) tigervnc-debuginfo-1.6.0-22.14.1.x86_64.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP5 ) tigervnc-1.6.0-22.14.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP4 ) tigervnc-debugsource-1.6.0-22.14.1.x86_64.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP5 ) tigervnc-debuginfo-1.6.0-22.14.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP5 ) tigervnc-debugsource-1.6.0-22.14.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP4 ) xorg-x11-Xvnc-1.6.0-22.14.1.x86_64.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP4 ) xorg-x11-Xvnc-debuginfo-1.6.0-22.14.1.x86_64.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP5 ) xorg-x11-Xvnc-1.6.0-22.14.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1749-1(SUSE Linux Enterprise Server 12-SP5 ) xorg-x11-Xvnc-debuginfo-1.6.0-22.14.1.x86_64_SP5.rpmLinux
(RHSA-2020:3875) tigervnc security and bug fix update tigervnc-1.8.0-21.el7.x86_64.rpmLinux
(RHSA-2020:3875) tigervnc security and bug fix update tigervnc-icons-1.8.0-21.el7.noarch.rpmLinux
(RHSA-2020:3875) tigervnc security and bug fix update tigervnc-license-1.8.0-21.el7.noarch.rpmLinux
(RHSA-2020:3875) tigervnc security and bug fix update tigervnc-server-1.8.0-21.el7.x86_64.rpmLinux
(RHSA-2020:3875) tigervnc security and bug fix update tigervnc-server-applet-1.8.0-21.el7.noarch.rpmLinux
(RHSA-2020:3875) tigervnc security and bug fix update tigervnc-server-minimal-1.8.0-21.el7.x86_64.rpmLinux
(RHSA-2020:3875) tigervnc security and bug fix update tigervnc-server-module-1.8.0-21.el7.x86_64.rpmLinux
(CESA-2020:1497) tigervnc security update tigervnc-1.9.0-14.el8_1.x86_64.rpmLinux
(CESA-2020:1497) tigervnc security update tigervnc-icons-1.9.0-14.el8_1.noarch.rpmLinux
(CESA-2020:1497) tigervnc security update tigervnc-license-1.9.0-14.el8_1.noarch.rpmLinux
(CESA-2020:1497) tigervnc security update tigervnc-server-1.9.0-14.el8_1.x86_64.rpmLinux
(CESA-2020:1497) tigervnc security update tigervnc-server-applet-1.9.0-14.el8_1.noarch.rpmLinux
(CESA-2020:1497) tigervnc security update tigervnc-server-minimal-1.9.0-14.el8_1.x86_64.rpmLinux
(CESA-2020:1497) tigervnc security update tigervnc-server-module-1.9.0-14.el8_1.x86_64.rpmLinux
(CESA-2020:3875) tigervnc security and bug fix update tigervnc-1.8.0-21.el7.x86_64.rpmLinux
(CESA-2020:3875) tigervnc security and bug fix update tigervnc-icons-1.8.0-21.el7.noarch.rpmLinux
(CESA-2020:3875) tigervnc security and bug fix update tigervnc-license-1.8.0-21.el7.noarch.rpmLinux
(CESA-2020:3875) tigervnc security and bug fix update tigervnc-server-1.8.0-21.el7.x86_64.rpmLinux
(CESA-2020:3875) tigervnc security and bug fix update tigervnc-server-minimal-1.8.0-21.el7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234