CVE-2019-15681

HIGH

libvncserver < 0.9.12 - Memory Leak and Information Disclosure via VNC Server Code

Title source: llm
STIX 2.1

Description

LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.

References (12)

Core 12
Core References
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/10/msg00039.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/11/msg00032.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00027.html
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4407-1/
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00073.html
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4547-1/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4573-1/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4587-1/
Third Party Advisory x_refsource_confirm
https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf

Scores

CVSS v3 7.5
EPSS 0.0335
EPSS Percentile 87.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-665
Status published
Products (13)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04 (2 CPE variants)
canonical/ubuntu_linux 18.04
canonical/ubuntu_linux 18.10
debian/debian_linux 8.0
debian/debian_linux 9.0
libvnc_project/libvncserver < 0.9.12
siemens/simatic_itc1500_firmware 3.0.0.0 - 3.2.1.0
siemens/simatic_itc1500_pro_firmware 3.0.0.0 - 3.2.1.0
siemens/simatic_itc1900_firmware 3.0.0.0 - 3.2.1.0
... and 3 more
Published Oct 29, 2019
Tracked Since Feb 18, 2026