Debian/libvncserver: critical 9.8
libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690.
Action: Upgrade libvncserver to 0.9.12+dfsg-9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.12+dfsg-9 | - |
Fixed versions
| 0.9.12+dfsg-9 |
Sources
- osv: DEBIAN-CVE-2019-20788#Debian:14/libvncserver
- https://security-tracker.debian.org/tracker/CVE-2019-20788
published · modified · JSON