Sign-up

ID

VAR-202006-1848


CVE

CVE-2020-14397


TITLE

LibVNCServer In NULL Pointer dereference vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2020-006694

DESCRIPTION

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference. LibVNCServer To NULL A vulnerability exists regarding pointer dereference.Service operation interruption (DoS) It may be put into a state. Pillow is a Python-based image processing library. There is currently no information about this vulnerability, please feel free to follow CNNVD or manufacturer announcements. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: libvncserver security update Advisory ID: RHSA-2021:1811-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:1811 Issue date: 2021-05-18 CVE Names: CVE-2018-21247 CVE-2019-20839 CVE-2020-14397 CVE-2020-14405 CVE-2020-25708 ==================================================================== 1. Summary: An update for libvncserver is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder (v. 8) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: LibVNCServer is a C library that enables you to implement VNC server functionality into own programs. Security Fix(es): * libvncserver: uninitialized memory contents are vulnerable to Information Leak (CVE-2018-21247) * libvncserver: buffer overflow in ConnectClientToUnixSock() (CVE-2019-20839) * libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference (CVE-2020-14397) * libvncserver: libvncclient/rfbproto.c does not limit TextChat size (CVE-2020-14405) * libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS (CVE-2020-25708) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1849877 - CVE-2019-20839 libvncserver: buffer overflow in ConnectClientToUnixSock() 1849886 - CVE-2018-21247 libvncserver: uninitialized memory contents are vulnerable to Information Leak 1860325 - CVE-2020-14405 libvncserver: libvncclient/rfbproto.c does not limit TextChat size 1860344 - CVE-2020-14397 libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference 1896739 - CVE-2020-25708 libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS 6. Package List: Red Hat Enterprise Linux AppStream (v. 8): Source: libvncserver-0.9.11-17.el8.src.rpm aarch64: libvncserver-0.9.11-17.el8.aarch64.rpm libvncserver-debuginfo-0.9.11-17.el8.aarch64.rpm libvncserver-debugsource-0.9.11-17.el8.aarch64.rpm ppc64le: libvncserver-0.9.11-17.el8.ppc64le.rpm libvncserver-debuginfo-0.9.11-17.el8.ppc64le.rpm libvncserver-debugsource-0.9.11-17.el8.ppc64le.rpm s390x: libvncserver-0.9.11-17.el8.s390x.rpm libvncserver-debuginfo-0.9.11-17.el8.s390x.rpm libvncserver-debugsource-0.9.11-17.el8.s390x.rpm x86_64: libvncserver-0.9.11-17.el8.i686.rpm libvncserver-0.9.11-17.el8.x86_64.rpm libvncserver-debuginfo-0.9.11-17.el8.i686.rpm libvncserver-debuginfo-0.9.11-17.el8.x86_64.rpm libvncserver-debugsource-0.9.11-17.el8.i686.rpm libvncserver-debugsource-0.9.11-17.el8.x86_64.rpm Red Hat CodeReady Linux Builder (v. 8): aarch64: libvncserver-debuginfo-0.9.11-17.el8.aarch64.rpm libvncserver-debugsource-0.9.11-17.el8.aarch64.rpm libvncserver-devel-0.9.11-17.el8.aarch64.rpm ppc64le: libvncserver-debuginfo-0.9.11-17.el8.ppc64le.rpm libvncserver-debugsource-0.9.11-17.el8.ppc64le.rpm libvncserver-devel-0.9.11-17.el8.ppc64le.rpm s390x: libvncserver-debuginfo-0.9.11-17.el8.s390x.rpm libvncserver-debugsource-0.9.11-17.el8.s390x.rpm libvncserver-devel-0.9.11-17.el8.s390x.rpm x86_64: libvncserver-debuginfo-0.9.11-17.el8.i686.rpm libvncserver-debuginfo-0.9.11-17.el8.x86_64.rpm libvncserver-debugsource-0.9.11-17.el8.i686.rpm libvncserver-debugsource-0.9.11-17.el8.x86_64.rpm libvncserver-devel-0.9.11-17.el8.i686.rpm libvncserver-devel-0.9.11-17.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYKPzPNzjgjWX9erEAQgJcQ//eFCPv7OwkNtF1owJhqkboBZSSILHH2sX bXDy/9rdYjrY13E6kfMdjvXQyfSa8RM1lB+3LldAA1LokLqf6aTEHrBrjDadAKSW 2FfxerEbatQLlQubcxtrb5gn3ZUv+8gf/n3E8Fgjxm4EQkCZC3TF7Smmj3ofELtq 2aYKRKyOGrMR2JZuySPuB5fm9/8LcYlfn5atG4Yqc4QofgGe2YhORY6GuneUOSBr Li0LBXpBI7o3VY0dosXListDptm8UEZ8sx/hUEqR2YEBoQoGF3EZsuNsqzYkG99e i6LmBTh8zCgsnOHKrLVmG00YauAdpPrgmOq2cay7bw0jhAzp+huLtSCZ5yvEbh8p xOXM0YbocGwSoKdJ6RGaquYD4Vw/aKHIxp1L6BE3hMe2lIt6dObu+VxtgFmUVDFv iUvmv9J1Jr7lZAByA0r+1gnnfrXyUc+ln3jhuu0xZ3tQvGiEAKAsvDNB8/78TCT/ CmuU0jwvBxTqeISxAaWcCrl9LHg+gZv6wop8j8L/BDyEY4zQgAT11nRo0cXjFaE0 YgmFxA5kAEqDiNr2k/kq3w+sUH9pdEhiJQTqTt0uZvHesKXaIKTa7YKnvPgWbolM Nhw8esGKItirSh536uT/9/4DIQegxxM8sx5PhQCwL5pKldNGwiLyuFUF2ypRu9KT 8A9MNz92TFY=uZts -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce . (CVE-2018-7225) Pavel Cheremushkin discovered that an information disclosure vulnerability existed in Vino when sending a ServerCutText message. ========================================================================== Ubuntu Security Notice USN-4434-1 July 23, 2020 libvncserver vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in LibVNCServer. Software Description: - libvncserver: vnc server library Details: Ramin Farajpour Cami discovered that LibVNCServer incorrectly handled certain malformed unix socket names. A remote attacker could exploit this with a crafted socket name, leading to a denial of service, or possibly execute arbitrary code. (CVE-2019-20839) It was discovered that LibVNCServer did not properly access byte-aligned data. A remote attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. (CVE-2019-20840) Christian Beier discovered that LibVNCServer incorrectly handled anonymous TLS connections. A remote attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-14396) It was discovered that LibVNCServer incorrectly handled region clipping. A remote attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service. (CVE-2020-14397) It was discovered that LibVNCServer did not properly reset incorrectly terminated TCP connections. A remote attacker could possibly use this issue to cause an infinite loop, resulting in a denial of service. (CVE-2020-14398) It was discovered that LibVNCServer did not properly access byte-aligned data. A remote attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service. (CVE-2020-14399, CVE-2020-14400) It was discovered that LibVNCServer incorrectly handled screen scaling on the server side. A remote attacker could use this issue to cause LibVNCServer to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-14401) It was discovered that LibVNCServer incorrectly handled encodings. A remote attacker could use this issue to cause LibVNCServer to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-14402, CVE-2020-14403, CVE-2020-14404) It was discovered that LibVNCServer incorrectly handled TextChat messages. A remote attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service. (CVE-2020-14405) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: libvncclient1 0.9.12+dfsg-9ubuntu0.2 libvncserver1 0.9.12+dfsg-9ubuntu0.2 Ubuntu 18.04 LTS: libvncclient1 0.9.11+dfsg-1ubuntu1.3 libvncserver1 0.9.11+dfsg-1ubuntu1.3 Ubuntu 16.04 LTS: libvncclient1 0.9.10+dfsg-3ubuntu0.16.04.5 libvncserver1 0.9.10+dfsg-3ubuntu0.16.04.5 After a standard system update you need to restart LibVNCServer applications to make all the necessary changes. References: https://usn.ubuntu.com/4434-1 CVE-2019-20839, CVE-2019-20840, CVE-2020-14396, CVE-2020-14397, CVE-2020-14398, CVE-2020-14399, CVE-2020-14400, CVE-2020-14401, CVE-2020-14402, CVE-2020-14403, CVE-2020-14404, CVE-2020-14405 Package Information: https://launchpad.net/ubuntu/+source/libvncserver/0.9.12+dfsg-9ubuntu0.2 https://launchpad.net/ubuntu/+source/libvncserver/0.9.11+dfsg-1ubuntu1.3 https://launchpad.net/ubuntu/+source/libvncserver/0.9.10+dfsg-3ubuntu0.16.04.5

Trust: 2.43

sources: NVD: CVE-2020-14397 // JVNDB: JVNDB-2020-006694 // CNNVD: CNNVD-202104-975 // PACKETSTORM: 162682 // PACKETSTORM: 159499 // PACKETSTORM: 158543

AFFECTED PRODUCTS

vendor:siemensmodel:simatic itc2200scope:gteversion:3.0.0.0

Trust: 1.0

vendor:siemensmodel:simatic itc1500 proscope:gteversion:3.0.0.0

Trust: 1.0

vendor:siemensmodel:simatic itc2200 proscope:ltversion:3.2.1.0

Trust: 1.0

vendor:siemensmodel:simatic itc1900 proscope:gteversion:3.0.0.0

Trust: 1.0

vendor:siemensmodel:simatic itc2200scope:ltversion:3.2.1.0

Trust: 1.0

vendor:debianmodel:linuxscope:eqversion:9.0

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:18.04

Trust: 1.0

vendor:opensusemodel:leapscope:eqversion:15.2

Trust: 1.0

vendor:siemensmodel:simatic itc1900scope:gteversion:3.0.0.0

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:16.04

Trust: 1.0

vendor:siemensmodel:simatic itc1500scope:gteversion:3.0.0.0

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:14.04

Trust: 1.0

vendor:libvncmodel:libvncserverscope:lteversion:0.9.12

Trust: 1.0

vendor:siemensmodel:simatic itc2200 proscope:gteversion:3.0.0.0

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:20.04

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:18.10

Trust: 1.0

vendor:debianmodel:linuxscope:eqversion:8.0

Trust: 1.0

vendor:siemensmodel:simatic itc1900 proscope:ltversion:3.2.1.0

Trust: 1.0

vendor:siemensmodel:simatic itc1500 proscope:ltversion:3.2.1.0

Trust: 1.0

vendor:siemensmodel:simatic itc1900scope:ltversion:3.2.1.0

Trust: 1.0

vendor:siemensmodel:simatic itc1500scope:ltversion:3.2.1.0

Trust: 1.0

vendor:libvncmodel:libvncserverscope:eqversion:0.9.13

Trust: 0.8

sources: JVNDB: JVNDB-2020-006694 // NVD: CVE-2020-14397

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-14397
value: HIGH

Trust: 1.0

NVD: JVNDB-2020-006694
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202104-975
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-202006-1180
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2020-14397
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

NVD: JVNDB-2020-006694
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

nvd@nist.gov: CVE-2020-14397
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: JVNDB-2020-006694
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2020-006694 // CNNVD: CNNVD-202104-975 // CNNVD: CNNVD-202006-1180 // NVD: CVE-2020-14397

PROBLEMTYPE DATA

problemtype:CWE-476

Trust: 1.8

sources: JVNDB: JVNDB-2020-006694 // NVD: CVE-2020-14397

THREAT TYPE

remote

Trust: 0.8

sources: PACKETSTORM: 159499 // PACKETSTORM: 158543 // CNNVD: CNNVD-202006-1180

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202104-975

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2020-006694

PATCH
title:libvncserver: add missing NULL pointer checksurl:https://github.com/LibVNC/libvncserver/commit/38e98ee61d74f5f5ab4aa4c77146faad1962d6d0
Trust: 0.8
title:Comparing changesurl:https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13
Trust: 0.8
title:LibVNCServer Fixes for code issue vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=122071
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2020-006694 // 
            
            
            
            CNNVD: CNNVD-202006-1180

EXTERNAL IDS
db:NVDid:CVE-2020-14397
Trust: 2.7
db:SIEMENSid:SSA-390195
Trust: 1.6
db:JVNDBid:JVNDB-2020-006694
Trust: 0.8
db:PACKETSTORMid:162682
Trust: 0.7
db:PACKETSTORMid:159499
Trust: 0.7
db:PACKETSTORMid:158543
Trust: 0.7
db:CS-HELPid:SB2021041363
Trust: 0.6
db:CNNVDid:CNNVD-202104-975
Trust: 0.6
db:AUSCERTid:ESB-2021.1705
Trust: 0.6
db:AUSCERTid:ESB-2020.2248
Trust: 0.6
db:AUSCERTid:ESB-2020.2535
Trust: 0.6
db:AUSCERTid:ESB-2020.2727
Trust: 0.6
db:AUSCERTid:ESB-2020.2469
Trust: 0.6
db:AUSCERTid:ESB-2020.3465
Trust: 0.6
db:AUSCERTid:ESB-2020.2972
Trust: 0.6
db:CS-HELPid:SB2021052205
Trust: 0.6
db:CS-HELPid:SB2021121649
Trust: 0.6
db:NSFOCUSid:48876
Trust: 0.6
db:CNNVDid:CNNVD-202006-1180
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2020-006694 // 
            
            
            
            PACKETSTORM: 162682 // 
            
            
            
            PACKETSTORM: 159499 // 
            
            
            
            PACKETSTORM: 158543 // 
            
            
            
            CNNVD: CNNVD-202104-975 // 
            
            
            
            CNNVD: CNNVD-202006-1180 // 
            
            
            
            NVD: CVE-2020-14397

REFERENCES
url:https://nvd.nist.gov/vuln/detail/cve-2020-14397
Trust: 1.7
url:http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html
Trust: 1.6
url:https://github.com/libvnc/libvncserver/compare/libvncserver-0.9.12...libvncserver-0.9.13
Trust: 1.6
url:https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html
Trust: 1.6
url:https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html
Trust: 1.6
url:https://github.com/libvnc/libvncserver/commit/38e98ee61d74f5f5ab4aa4c77146faad1962d6d0
Trust: 1.6
url:https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
Trust: 1.6
url:http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html
Trust: 1.6
url:https://usn.ubuntu.com/4434-1/
Trust: 1.6
url:https://usn.ubuntu.com/4573-1/
Trust: 1.6
url:http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html
Trust: 1.6
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-14397
Trust: 0.8
url:https://www.cybersecurity-help.cz/vdb/sb2021041363
Trust: 0.6
url:http://www.nsfocus.net/vulndb/48876
Trust: 0.6
url:https://vigilance.fr/vulnerability/libvncserver-multiple-vulnerabilities-32651
Trust: 0.6
url:https://www.cybersecurity-help.cz/vdb/sb2021052205
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2021.1705
Trust: 0.6
url:https://packetstormsecurity.com/files/162682/red-hat-security-advisory-2021-1811-01.html
Trust: 0.6
url:https://packetstormsecurity.com/files/158543/ubuntu-security-notice-usn-4434-1.html
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.2972/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.2469/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.2248/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.2535/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.2727/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.3465/
Trust: 0.6
url:https://www.cybersecurity-help.cz/vdb/sb2021121649
Trust: 0.6
url:https://packetstormsecurity.com/files/159499/ubuntu-security-notice-usn-4573-1.html
Trust: 0.6
url:https://nvd.nist.gov/vuln/detail/cve-2019-20839
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2020-14405
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2020-14402
Trust: 0.2
url:https://access.redhat.com/security/cve/cve-2020-14397
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-25708
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2018-21247
Trust: 0.1
url:https://listman.redhat.com/mailman/listinfo/rhsa-announce
Trust: 0.1
url:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/
Trust: 0.1
url:https://access.redhat.com/security/updates/classification/#moderate
Trust: 0.1
url:https://access.redhat.com/errata/rhsa-2021:1811
Trust: 0.1
url:https://access.redhat.com/articles/11258
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2018-21247
Trust: 0.1
url:https://access.redhat.com/security/team/key/
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2020-14405
Trust: 0.1
url:https://bugzilla.redhat.com/):
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-25708
Trust: 0.1
url:https://access.redhat.com/security/team/contact/
Trust: 0.1
url:https://access.redhat.com/security/cve/cve-2019-20839
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/vino/3.8.1-0ubuntu9.3
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-14404
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2019-15681
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/vino/3.22.0-5ubuntu2.1
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-14403
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/vino/3.22.0-3ubuntu1.1
Trust: 0.1
url:https://usn.ubuntu.com/4573-1
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2014-6053
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2018-7225
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/libvncserver/0.9.11+dfsg-1ubuntu1.3
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-14400
Trust: 0.1
url:https://usn.ubuntu.com/4434-1
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-14398
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-14401
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/libvncserver/0.9.10+dfsg-3ubuntu0.16.04.5
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2020-14396
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2019-20840
Trust: 0.1
url:https://launchpad.net/ubuntu/+source/libvncserver/0.9.12+dfsg-9ubuntu0.2
Trust: 0.1
sources:
            
            
            JVNDB: JVNDB-2020-006694 // 
            
            
            
            PACKETSTORM: 162682 // 
            
            
            
            PACKETSTORM: 159499 // 
            
            
            
            PACKETSTORM: 158543 // 
            
            
            
            CNNVD: CNNVD-202104-975 // 
            
            
            
            CNNVD: CNNVD-202006-1180 // 
            
            
            
            NVD: CVE-2020-14397

CREDITS
Red Hat
Trust: 0.7
sources:
            
            
            PACKETSTORM: 162682 // 
            
            
            
            CNNVD: CNNVD-202006-1180

SOURCES
db:JVNDBid:JVNDB-2020-006694
db:PACKETSTORMid:162682
db:PACKETSTORMid:159499
db:PACKETSTORMid:158543
db:CNNVDid:CNNVD-202104-975
db:CNNVDid:CNNVD-202006-1180
db:NVDid:CVE-2020-14397

LAST UPDATE DATE
2024-11-23T19:56:40.066000+00:00

SOURCES UPDATE DATE
db:JVNDBid:JVNDB-2020-006694date:2020-07-15T00:00:00
db:CNNVDid:CNNVD-202104-975date:2021-04-14T00:00:00
db:CNNVDid:CNNVD-202006-1180date:2021-12-17T00:00:00
db:NVDid:CVE-2020-14397date:2024-11-21T05:03:10.483

SOURCES RELEASE DATE
db:JVNDBid:JVNDB-2020-006694date:2020-07-15T00:00:00
db:PACKETSTORMid:162682date:2021-05-19T14:14:14
db:PACKETSTORMid:159499date:2020-10-07T16:06:41
db:PACKETSTORMid:158543date:2020-07-24T14:28:24
db:CNNVDid:CNNVD-202104-975date:2021-04-13T00:00:00
db:CNNVDid:CNNVD-202006-1180date:2020-06-17T00:00:00
db:NVDid:CVE-2020-14397date:2020-06-17T16:15:11.773