Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-15681
HistoryOct 29, 2019 - 7:15 p.m.

CVE-2019-15681

2019-10-2919:15:18
CWE-665
[email protected]
web.nvd.nist.gov
3

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.2%

JSON

LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.

Affected configurations

NVD
Node
libvnc_projectlibvncserverRange<0.9.12
Node
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch16.04esm
OR
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch18.10
Node
debiandebian_linuxMatch8.0
OR
debiandebian_linuxMatch9.0
Node
siemenssimatic_itc1500Match-
AND
siemenssimatic_itc1500_firmwareRange3.0.0.0–3.2.1.0
Node
siemenssimatic_itc1500_proMatch-
AND
siemenssimatic_itc1500_pro_firmwareRange3.0.0.0–3.2.1.0
Node
siemenssimatic_itc1900Match-
AND
siemenssimatic_itc1900_firmwareRange3.0.0.0–3.2.1.0
Node
siemenssimatic_itc1900_proMatch-
AND
siemenssimatic_itc1900_pro_firmwareRange3.0.0.0–3.2.1.0
Node
siemenssimatic_itc2200Match-
AND
siemenssimatic_itc2200_firmwareRange3.0.0.0–3.2.1.0
Node
siemenssimatic_itc2200_proMatch-
AND
siemenssimatic_itc2200_pro_firmwareRange3.0.0.0–3.2.1.0

Related

mageia 3
veracode 1
openvas 25
debian 4
nessus 27
osv 8
cvelist 1
redhatcve 1
debiancve 1
prion 1
alpinelinux 1
virtuozzo 1
ubuntucve 1
cve 1
suse 2
ubuntu 4
threatpost 1
ics 1
mageia
mageia
Updated libvncserver packages fix security vulnerability
2019-12-06 17:15:42
Updated vino packages fix security vulnerability
2020-06-11 00:39:20
Updated italc packages fix security vulnerabilities
2020-11-23 22:51:37
veracode
veracode
Information Disclosure
2019-10-31 01:17:46
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0955-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for vino (EulerOS-SA-2020-2569)
2020-12-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2009-1)
2021-06-09 00:00:00
debian
debian
[SECURITY] [DLA 1977-1] libvncserver security update
2019-10-30 12:58:07
[SECURITY] [DLA 2014-1] vino security update
2019-11-29 08:30:55
[SECURITY] [DLA 2045-1] tightvnc security update
2019-12-21 16:03:14
nessus
nessus
Virtuozzo 6 : parallels-kernel-modules / etc (VZA-2019-093)
2019-12-09 00:00:00
openSUSE Security Update : vino (openSUSE-2020-1071)
2020-07-27 00:00:00
SUSE SLED15 / SLES15 Security Update : vino (SUSE-SU-2020:2009-1)
2020-07-23 00:00:00
osv
osv
CVE-2019-15681
2019-10-29 19:15:18
libvncserver - security update
2019-10-30 00:00:00
vino - security update
2019-11-29 00:00:00
cvelist
cvelist
CVE-2019-15681
2019-10-29 16:04:51
redhatcve
redhatcve
CVE-2019-15681
2020-07-08 08:20:46
debiancve
debiancve
CVE-2019-15681
2019-10-29 19:15:18
prion
prion
Information disclosure
2019-10-29 19:15:00
alpinelinux
alpinelinux
CVE-2019-15681
2019-10-29 19:15:18
virtuozzo
virtuozzo
Important product security update: Virtuozzo 6.0 Update 12 Hotfix 49 (6.0.12-3754)
2019-12-06 00:00:00
ubuntucve
ubuntucve
CVE-2019-15681
2019-10-29 00:00:00
cve
cve
CVE-2019-15681
2019-10-29 19:15:18
suse
suse
Security update for vino (moderate)
2020-07-26 00:00:00
Security update for LibVNCServer (important)
2020-05-11 00:00:00
ubuntu
ubuntu
LibVNCServer vulnerabilities
2020-07-01 00:00:00
Vino vulnerabilities
2020-10-07 00:00:00
iTALC vulnerabilities
2020-09-28 00:00:00
threatpost
threatpost
Critical Flaws in VNC Threaten Industrial Environments
2019-11-22 19:50:14
ics
ics
Siemens SIMATIC ITC
2021-12-16 12:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.2%

JSON
Related for NVD:CVE-2019-15681
mageia3veracode1openvas25debian4nessus27osv8cvelist1redhatcve1debiancve1prion1alpinelinux1virtuozzo1ubuntucve1cve1suse2ubuntu4threatpost1ics1