p PatchFirst

CVE-2019-15679

CVE-2019-15679

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.

CVSS 9.8 · Critical · EPSS 11.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • tightvnc

    Versions
    • 1.3.10: Affected

    No fix published

  • tightvnc Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:1.3.9-9.1

    Update to 1:1.3.9-9.1

  • tightvnc Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:1.3.9-9.1

    Update to 1:1.3.9-9.1

  • tightvnc Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:1.3.9-9.1

    Update to 1:1.3.9-9.1

  • tightvnc Ubuntu:Pro:14.04:LTS

    Versions
    • 1.3.9-6.4
    • 1.3.9-6.4ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1.3.9-6.5+deb8u1build0.14.04.1~esm1

    Update to 1.3.9-6.5+deb8u1build0.14.04.1~esm1

  • x11vnc Ubuntu:14.04:LTS

    Versions
    • 0.9.13-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ssvnc Ubuntu:16.04:LTS

    Versions
    • 1.0.29-2build1
    • 1.0.29-2+deb8u1build0.16.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tightvnc Ubuntu:16.04:LTS

    Versions
    • 1.3.10-0ubuntu2
    • 1.3.10-0ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vncsnapshot Ubuntu:16.04:LTS

    Versions
    • 1.2a-5.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • x2vnc Ubuntu:16.04:LTS

    Versions
    • 1.7.2-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ssvnc Ubuntu:18.04:LTS

    Versions
    • 1.0.29-3
    • 1.0.29-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tightvnc Ubuntu:18.04:LTS

    Versions
    • 1.3.10-0ubuntu3
    • 1.3.10-0ubuntu4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vncsnapshot Ubuntu:18.04:LTS

    Versions
    • 1.2a-5.1
    • 1.2a-5.1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • x2vnc Ubuntu:18.04:LTS

    Versions
    • 1.7.2-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ssvnc Ubuntu:20.04:LTS

    Versions
    • 1.0.29-4build1
    • 1.0.29-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tightvnc Ubuntu:20.04:LTS

    Versions
    • 1.3.10-0ubuntu5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • veyon Ubuntu:20.04:LTS

    Versions
    • 4.2.4+repack1-2
    • 4.2.5+repack1-1
    • 4.3.1+repack1-1
    • 4.3.1+repack1-2
    • 4.3.1+repack1-2build1
    • 4.3.1+repack1-2build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vncsnapshot Ubuntu:20.04:LTS

    Versions
    • 1.2a-5.1build1
    • 1.2a-5.1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • x2vnc Ubuntu:20.04:LTS

    Versions
    • 1.7.2-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ssvnc Ubuntu:22.04:LTS

    Versions
    • 1.0.29-5
    • 1.0.29-5build1
    • 1.0.29-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tightvnc Ubuntu:22.04:LTS

    Versions
    • 1:1.3.10-3
    • 1:1.3.10-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • veyon Ubuntu:22.04:LTS

    Versions
    • 4.5.3+repack1-1build1
    • 4.5.3+repack1-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vncsnapshot Ubuntu:22.04:LTS

    Versions
    • 1.2a-5.1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • x2vnc Ubuntu:22.04:LTS

    Versions
    • 1.7.2-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →