CVE-2019-15678
CVE-2019-15678
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via network connectivity.
CVSS 9.8 · Critical · EPSS 12.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
tightvnc
- Versions
- 1.3.10: Affected
No fix published
tightvnc Debian:12
- Affected ranges
- ECOSYSTEM: < 1:1.3.9-9.1
Update to 1:1.3.9-9.1
tightvnc Debian:13
- Affected ranges
- ECOSYSTEM: < 1:1.3.9-9.1
Update to 1:1.3.9-9.1
tightvnc Debian:14
- Affected ranges
- ECOSYSTEM: < 1:1.3.9-9.1
Update to 1:1.3.9-9.1
tightvnc Ubuntu:Pro:14.04:LTS
- Versions
- 1.3.9-6.4
- 1.3.9-6.4ubuntu1
- Affected ranges
- ECOSYSTEM: < 1.3.9-6.5+deb8u1build0.14.04.1~esm1
Update to 1.3.9-6.5+deb8u1build0.14.04.1~esm1
x11vnc Ubuntu:14.04:LTS
- Versions
- 0.9.13-1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bochs Ubuntu:16.04:LTS
- Versions
- 2.6-2build1
- 2.6-5
- 2.6-5build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
directvnc Ubuntu:16.04:LTS
- Versions
- 0.7.7-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ssvnc Ubuntu:16.04:LTS
- Versions
- 1.0.29-2build1
- 1.0.29-2+deb8u1build0.16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:16.04:LTS
- Versions
- 1.3.10-0ubuntu2
- 1.3.10-0ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
vncsnapshot Ubuntu:16.04:LTS
- Versions
- 1.2a-5.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x2vnc Ubuntu:16.04:LTS
- Versions
- 1.7.2-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bochs Ubuntu:18.04:LTS
- Versions
- 2.6-5build1
- 2.6-5build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
directvnc Ubuntu:18.04:LTS
- Versions
- 0.7.7-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ssvnc Ubuntu:18.04:LTS
- Versions
- 1.0.29-3
- 1.0.29-3build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:18.04:LTS
- Versions
- 1.3.10-0ubuntu3
- 1.3.10-0ubuntu4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
vncsnapshot Ubuntu:18.04:LTS
- Versions
- 1.2a-5.1
- 1.2a-5.1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
x2vnc Ubuntu:18.04:LTS
- Versions
- 1.7.2-6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bochs Ubuntu:20.04:LTS
- Versions
- 2.6.9+dfsg-3build1
- 2.6.9+dfsg-4
- 2.6.9+dfsg-5
- 2.6.10+dfsg-2
- 2.6.11+dfsg-1
- 2.6.11+dfsg-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
directvnc Ubuntu:20.04:LTS
- Versions
- 0.7.7-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ssvnc Ubuntu:20.04:LTS
- Versions
- 1.0.29-4build1
- 1.0.29-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:20.04:LTS
- Versions
- 1.3.10-0ubuntu5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
veyon Ubuntu:20.04:LTS
- Versions
- 4.2.4+repack1-2
- 4.2.5+repack1-1
- 4.3.1+repack1-1
- 4.3.1+repack1-2
- 4.3.1+repack1-2build1
- 4.3.1+repack1-2build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
vncsnapshot Ubuntu:20.04:LTS
- Versions
- 1.2a-5.1build1
- 1.2a-5.1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published