CVE-2019-15683

CRITICAL

TurboVNC < 2.2.3 - Authenticated Stack-based Buffer Overflow

Title source: llm
STIX 2.1

Description

TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a536136e. This could possibly result into remote code execution, since stack frame is not protected with stack canary. This attack appear to be exploitable via network connectivity. To exploit this vulnerability authorization on server is required. These issues have been fixed in commit cea98166008301e614e0d36776bf9435a536136e.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.1939
EPSS Percentile 97.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-121 CWE-787
Status published
Products (1)
turbovnc/turbovnc < 2.2.3
Published Oct 29, 2019
Tracked Since Feb 18, 2026