NetSight
IP …
high7.5

CVE-2020-14397

An issue was discovered in LibVNCServer before 0.9.13.

Impact

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.

Affected products

VendorProductAffected versions
Libvnc ProjectLibvncserver
through 0.9.12
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10, 20.04
DebianDebian Linux
Versions 8.0, 9.0
SiemensSimatic Itc1500 Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc1500 Pro Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc1900 Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc1900 Pro Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc2200 Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc2200 Pro Firmware
from 3.0.0.0 before 3.2.1.0
OpensuseLeap
Version 15.2

Weakness classification

CWE-476

References