CVE-2019-15690

CWE-122 — Heap-based Buffer OverflowCWE-190 — Integer Overflow12 documents8 sources
Severity
8.8HIGH
EPSS
4.3%
top 11.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Libvnc Libvncserver
Timeline
PublishedJan 24

Description

LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c. An attacker sends cursor shapes with specially crafted dimensions, which can result in remote code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶Debianlibvncserver< 0.9.12+dfsg-9+3
▶CVEListV5libvnc/libvncserver* — 0.9.12

🔴Vulnerability Details

3
GHSA
GHSA-rx9w-c6jv-2grg: LibVNCServer 0↗2025-01-24
▶
CVEList
CVE-2019-15690: LibVNCServer 0↗2025-01-24
▶
OSV
CVE-2019-15690: LibVNCServer 0↗2025-01-24
▶

📋Vendor Advisories

4
Ubuntu
LibVNCServer vulnerabilities↗2020-07-01
▶
Red Hat
libvncserver: HandleCursorShape() integer overflow resulting in heap-based buffer overflow↗2019-12-20
▶
Red Hat
libvncserver: integer overflow and heap-based buffer overflow in libvncclient/cursor.c in HandleCursorShape function↗2019-11-17
▶
Debian
CVE-2019-15690: libvncserver - LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerabil...↗2019
▶

💬Community

4
Bugzilla
CVE-2019-20788 libvncserver: integer overflow and heap-based buffer overflow in libvncclient/cursor.c in HandleCursorShape function↗2020-04-30
▶
Bugzilla
CVE-2019-15690 libvncserver: heap buffer overflow could result in crash or arbitrary code execution [fedora-all]↗2020-03-10
▶
Bugzilla
CVE-2019-15690 libvncserver: heap buffer overflow could result in crash or arbitrary code execution [epel-7]↗2020-03-10
▶
Bugzilla
CVE-2019-15690 libvncserver: HandleCursorShape() integer overflow resulting in heap-based buffer overflow↗2020-03-10
▶