CVE-2019-8287
CVE-2019-8287
This page contains facts from public vulnerability sources. Check the original advisory before updating.
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.
CVSS 9.8 · Critical · EPSS 19.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
tightvnc
- Versions
- 1.3.10: Affected
No fix published
tightvnc Debian:12
- Affected ranges
- ECOSYSTEM: < 1:1.3.9-9.1
Update to 1:1.3.9-9.1
tightvnc Debian:13
- Affected ranges
- ECOSYSTEM: < 1:1.3.9-9.1
Update to 1:1.3.9-9.1
tightvnc Debian:14
- Affected ranges
- ECOSYSTEM: < 1:1.3.9-9.1
Update to 1:1.3.9-9.1
tightvnc Ubuntu:Pro:14.04:LTS
- Versions
- 1.3.9-6.4
- 1.3.9-6.4ubuntu1
- Affected ranges
- ECOSYSTEM: < 1.3.9-6.5+deb8u1build0.14.04.1~esm1
Update to 1.3.9-6.5+deb8u1build0.14.04.1~esm1
tightvnc Ubuntu:16.04:LTS
- Versions
- 1.3.10-0ubuntu2
- 1.3.10-0ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:18.04:LTS
- Versions
- 1.3.10-0ubuntu3
- 1.3.10-0ubuntu4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:20.04:LTS
- Versions
- 1.3.10-0ubuntu5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:22.04:LTS
- Versions
- 1:1.3.10-3
- 1:1.3.10-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:24.04:LTS
- Versions
- 1:1.3.10-7
- 1:1.3.10-7build1
- 1:1.3.10-7build2
- 1:1.3.10-8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:25.10
- Versions
- 1:1.3.10-9
- 1:1.3.10-10
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:26.10
- Versions
- 1:1.3.10-10build1
- 1:1.3.10-11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:26.04:LTS
- Versions
- 1:1.3.10-10
- 1:1.3.10-10build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published