Denial Of Service (DoS)

2020-06-1806:14:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

47.4%

JSON

libvncserver.so is vulnerable to denial of service (DoS). The vulnerability exists through an out-of-bounds access through encodings in libvncserver/rre.c.

CPENameOperatorVersion
libvncserver.sole0.9.12
libvncserver:3.12eq0.9.12-r2
vino:xenialeq3.8.1-0ubuntu9
vino:xenialeq3.8.1-0ubuntu9.2
vino:focaleq3.22.0-5ubuntu2
vino:develeq3.22.0-5ubuntu2
vino:bioniceq3.22.0-3ubuntu1
vino:groovyeq3.22.0-5ubuntu2
libvncserver:edgeeq0.9.12-r2
libvncserver.sole0.9.12

Name	Operator	Version
libvncserver.so	le	0.9.12
libvncserver:3.12	eq	0.9.12-r2
vino:xenial	eq	3.8.1-0ubuntu9
vino:xenial	eq	3.8.1-0ubuntu9.2
vino:focal	eq	3.22.0-5ubuntu2
vino:devel	eq	3.22.0-5ubuntu2
vino:bionic	eq	3.22.0-3ubuntu1
vino:groovy	eq	3.22.0-5ubuntu2
libvncserver:edge	eq	0.9.12-r2
libvncserver.so	le	0.9.12