NetSight
IP …
high7.5

CVE-2019-20839

libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.

Impact

libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.

Affected products

VendorProductAffected versions
Libvnc ProjectLibvncserver
through 0.9.12
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10, 20.04
DebianDebian Linux
Versions 8.0, 9.0
SiemensSimatic Itc1500 Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc1500 Pro Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc1900 Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc1900 Pro Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc2200 Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc2200 Pro Firmware
from 3.0.0.0 before 3.2.1.0
OpensuseLeap
Version 15.2

Weakness classification

CWE-120

References