CVE-2020-25708

CWE-3697 documents7 sources
Severity
7.5HIGH
EPSS
0.8%
top 26.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Debian Debian LinuxLibvncserver Project LibvncserverRedhat Enterprise Linux
Timeline
PublishedNov 27
Latest updateMay 24

Description

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶Debianlibvncserver< 0.9.13+dfsg-1+3
▶CVEListV5libvncserverlibvncserver 0.9.12

Also affects: Debian Linux 10.0, Enterprise Linux 6.0, 7.0, 8.0

Patches

Patch: bugzilla.redhat.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-3xcq-6vjj-wqx7: A divide by zero issue was found to occur in libvncserver-0↗2022-05-24
▶
OSV
CVE-2020-25708: A divide by zero issue was found to occur in libvncserver-0↗2020-11-27
▶
CVEList
CVE-2020-25708: A divide by zero issue was found to occur in libvncserver-0↗2020-11-27
▶

📋Vendor Advisories

3
Ubuntu
LibVNCServer, Vino vulnerability↗2020-11-17
▶
Red Hat
libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS↗2020-05-13
▶
Debian
CVE-2020-25708: libvncserver - A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious cl...↗2020
▶