CVE-2019-15681

🗓️ 29 Oct 2019 16:04:51Reported by KasperskyType

LibVNC memory leak allows stack memory reading (CWE-655). Can bypass ASL

Reporter	Title	Published	Views	Family All 106
AlpineLinux	CVE-2019-15681	29 Oct 201916:04	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в vino	3 May 202623:59	–	astralinux
Circl	CVE-2019-15681	29 Jan 202416:46	–	circl
CNVD	LibVNC Memory Disclosure Vulnerability	30 Oct 201900:00	–	cnvd
Cvelist	CVE-2019-15681	29 Oct 201916:04	–	cvelist
Debian	[SECURITY] [DLA 1977-1] libvncserver security update	30 Oct 201912:58	–	debian
Debian	[SECURITY] [DLA 1979-1] italc security update	30 Oct 201922:21	–	debian
Debian	[SECURITY] [DLA 2014-1] vino security update	29 Nov 201908:30	–	debian
Debian	[SECURITY] [DLA 2045-1] tightvnc security update	21 Dec 201916:03	–	debian
Debian CVE	CVE-2019-15681	29 Oct 201916:04	–	debiancve

NVD

Node

libvnc_project libvncserverRange<0.9.12

Node

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04esm

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch18.10

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

siemens simatic_itc1500_firmwareRange3.0.0.0–3.2.1.0

AND

siemens simatic_itc1500Match-

Node

siemens simatic_itc1500_pro_firmwareRange3.0.0.0–3.2.1.0

AND

siemens simatic_itc1500_proMatch-

Node

siemens simatic_itc1900_firmwareRange3.0.0.0–3.2.1.0

AND

siemens simatic_itc1900Match-

Node

siemens simatic_itc1900_pro_firmwareRange3.0.0.0–3.2.1.0

AND

siemens simatic_itc1900_proMatch-

Node

siemens simatic_itc2200_firmwareRange3.0.0.0–3.2.1.0

AND

siemens simatic_itc2200Match-

Node

siemens simatic_itc2200_pro_firmwareRange3.0.0.0–3.2.1.0

AND

siemens simatic_itc2200_proMatch-

[
  {
    "product": "LibVNC",
    "vendor": "Kaspersky",
    "versions": [
      {
        "status": "affected",
        "version": "0.9.12"
      }
    ]
  }
]

Source	Link
usn	www.usn.ubuntu.com/4407-1/
lists	www.lists.debian.org/debian-lts-announce/2019/10/msg00039.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
lists	www.lists.debian.org/debian-lts-announce/2019/11/msg00032.html
github	www.github.com/LibVNC/libvncserver/commit/d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a
lists	www.lists.debian.org/debian-lts-announce/2019/12/msg00028.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00073.html
usn	www.usn.ubuntu.com/4587-1/
usn	www.usn.ubuntu.com/4573-1/
usn	www.usn.ubuntu.com/4547-1/

21 Nov 2024 04:29Current

8.3High risk

Vulners AI Score8.3

CVSS 25

CVSS 3.17.5

EPSS0.0937

CWE-665