p PatchFirst

CVE-2019-15680

CVE-2019-15680

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity.

CVSS 7.5 · High · EPSS 2.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • tightvnc

    Versions
    • 1.3.10: Affected

    No fix published

  • libvncserver Debian:12

    Versions
    • 0.9.14+dfsg-1
    • 0.9.14+dfsg-1+deb12u1
    • 0.9.14+dfsg-1+deb12u2
    • 0.9.15+dfsg-1
    • 0.9.15+dfsg-2
    • 0.9.15+dfsg-3
    • 0.9.15+dfsg-4
    • 0.9.15+dfsg-5
    • 0.9.15+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libvncserver Debian:13

    Versions
    • 0.9.15+dfsg-1
    • 0.9.15+dfsg-1+deb13u1
    • 0.9.15+dfsg-1+deb13u2
    • 0.9.15+dfsg-2
    • 0.9.15+dfsg-3
    • 0.9.15+dfsg-4
    • 0.9.15+dfsg-5
    • 0.9.15+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libvncserver Debian:14

    Versions
    • 0.9.15+dfsg-1
    • 0.9.15+dfsg-2
    • 0.9.15+dfsg-3
    • 0.9.15+dfsg-4
    • 0.9.15+dfsg-5
    • 0.9.15+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tightvnc Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:1.3.9-9.1

    Update to 1:1.3.9-9.1

  • tightvnc Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:1.3.9-9.1

    Update to 1:1.3.9-9.1

  • tightvnc Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:1.3.9-9.1

    Update to 1:1.3.9-9.1

  • tightvnc Ubuntu:Pro:14.04:LTS

    Versions
    • 1.3.9-6.4
    • 1.3.9-6.4ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1.3.9-6.5+deb8u1build0.14.04.1~esm1

    Update to 1.3.9-6.5+deb8u1build0.14.04.1~esm1

  • x11vnc Ubuntu:14.04:LTS

    Versions
    • 0.9.13-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libvncserver Ubuntu:16.04:LTS

    Versions
    • 0.9.10+dfsg-3
    • 0.9.10+dfsg-3build1
    • 0.9.10+dfsg-3ubuntu0.16.04.1
    • 0.9.10+dfsg-3ubuntu0.16.04.2
    • 0.9.10+dfsg-3ubuntu0.16.04.3
    Affected ranges
    • ECOSYSTEM: < 0.9.10+dfsg-3ubuntu0.16.04.4

    Update to 0.9.10+dfsg-3ubuntu0.16.04.4

  • ssvnc Ubuntu:16.04:LTS

    Versions
    • 1.0.29-2build1
    • 1.0.29-2+deb8u1build0.16.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tightvnc Ubuntu:16.04:LTS

    Versions
    • 1.3.10-0ubuntu2
    • 1.3.10-0ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vncsnapshot Ubuntu:16.04:LTS

    Versions
    • 1.2a-5.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libvncserver Ubuntu:18.04:LTS

    Versions
    • 0.9.11+dfsg-1
    • 0.9.11+dfsg-1ubuntu1
    • 0.9.11+dfsg-1ubuntu1.1
    Affected ranges
    • ECOSYSTEM: < 0.9.11+dfsg-1ubuntu1.2

    Update to 0.9.11+dfsg-1ubuntu1.2

  • ssvnc Ubuntu:18.04:LTS

    Versions
    • 1.0.29-3
    • 1.0.29-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tightvnc Ubuntu:18.04:LTS

    Versions
    • 1.3.10-0ubuntu3
    • 1.3.10-0ubuntu4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vncsnapshot Ubuntu:18.04:LTS

    Versions
    • 1.2a-5.1
    • 1.2a-5.1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libvncserver Ubuntu:20.04:LTS

    Versions
    • 0.9.11+dfsg-1.3
    • 0.9.12+dfsg-3ubuntu3
    • 0.9.12+dfsg-6
    • 0.9.12+dfsg-7
    • 0.9.12+dfsg-8
    • 0.9.12+dfsg-9
    Affected ranges
    • ECOSYSTEM: < 0.9.12+dfsg-9ubuntu0.1

    Update to 0.9.12+dfsg-9ubuntu0.1

  • ssvnc Ubuntu:20.04:LTS

    Versions
    • 1.0.29-4build1
    • 1.0.29-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tightvnc Ubuntu:20.04:LTS

    Versions
    • 1.3.10-0ubuntu5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • veyon Ubuntu:20.04:LTS

    Versions
    • 4.2.4+repack1-2
    • 4.2.5+repack1-1
    • 4.3.1+repack1-1
    • 4.3.1+repack1-2
    • 4.3.1+repack1-2build1
    • 4.3.1+repack1-2build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • vncsnapshot Ubuntu:20.04:LTS

    Versions
    • 1.2a-5.1build1
    • 1.2a-5.1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ssvnc Ubuntu:22.04:LTS

    Versions
    • 1.0.29-5
    • 1.0.29-5build1
    • 1.0.29-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • tightvnc Ubuntu:22.04:LTS

    Versions
    • 1:1.3.10-3
    • 1:1.3.10-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →