CVE-2020-14398
CVE-2020-14398
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c.
CVSS 7.5 · High · EPSS 2.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libvncserver Debian:12
- Affected ranges
- ECOSYSTEM: < 0.9.13+dfsg-1
Update to 0.9.13+dfsg-1
libvncserver Debian:13
- Affected ranges
- ECOSYSTEM: < 0.9.13+dfsg-1
Update to 0.9.13+dfsg-1
libvncserver Debian:14
- Affected ranges
- ECOSYSTEM: < 0.9.13+dfsg-1
Update to 0.9.13+dfsg-1
x11vnc Ubuntu:14.04:LTS
- Versions
- 0.9.13-1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libvncserver Ubuntu:16.04:LTS
- Versions
- 0.9.10+dfsg-3
- 0.9.10+dfsg-3build1
- 0.9.10+dfsg-3ubuntu0.16.04.1
- 0.9.10+dfsg-3ubuntu0.16.04.2
- 0.9.10+dfsg-3ubuntu0.16.04.3
- 0.9.10+dfsg-3ubuntu0.16.04.4
- Affected ranges
- ECOSYSTEM: < 0.9.10+dfsg-3ubuntu0.16.04.5
Update to 0.9.10+dfsg-3ubuntu0.16.04.5
libvncserver Ubuntu:18.04:LTS
- Versions
- 0.9.11+dfsg-1
- 0.9.11+dfsg-1ubuntu1
- 0.9.11+dfsg-1ubuntu1.1
- 0.9.11+dfsg-1ubuntu1.2
- Affected ranges
- ECOSYSTEM: < 0.9.11+dfsg-1ubuntu1.3
Update to 0.9.11+dfsg-1ubuntu1.3
libvncserver Ubuntu:20.04:LTS
- Versions
- 0.9.11+dfsg-1.3
- 0.9.12+dfsg-3ubuntu3
- 0.9.12+dfsg-6
- 0.9.12+dfsg-7
- 0.9.12+dfsg-8
- 0.9.12+dfsg-9
- 0.9.12+dfsg-9ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 0.9.12+dfsg-9ubuntu0.2
Update to 0.9.12+dfsg-9ubuntu0.2
veyon Ubuntu:20.04:LTS
- Versions
- 4.2.4+repack1-2
- 4.2.5+repack1-1
- 4.3.1+repack1-1
- 4.3.1+repack1-2
- 4.3.1+repack1-2build1
- 4.3.1+repack1-2build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
veyon Ubuntu:22.04:LTS
- Versions
- 4.5.3+repack1-1build1
- 4.5.3+repack1-1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
veyon Ubuntu:24.04:LTS
- Versions
- 4.7.5+repack1-1build2
- 4.7.5+repack1-1ubuntu1
- 4.7.5+repack1-1ubuntu3
- 4.7.5+repack1-1ubuntu4
- 4.7.5+repack1-1ubuntu5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
veyon Ubuntu:25.10
- Versions
- 4.7.5+repack1-1ubuntu6
- 4.7.5+repack1-1ubuntu7
- 4.9.7+repack1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
veyon Ubuntu:26.10
- Versions
- 4.9.7+repack1-1build1
- 4.9.7+repack1-1.1
- 4.9.7+repack1-1.1build1
- 4.9.7+repack1-1.1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
veyon Ubuntu:26.04:LTS
- Versions
- 4.9.7+repack1-1
- 4.9.7+repack1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13
- https://github.com/LibVNC/libvncserver/commit/57433015f856cc12753378254ce4f1c78f5d9c7b
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html
- https://usn.ubuntu.com/4434-1/
- https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
- https://nvd.nist.gov/vuln/detail/CVE-2020-14398