VDB

CVE-2019-15679

CVE-2019-15679 PUBLISHED

TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.

EPSS 2.63% · 86.0th percentile

Risk Scores

EPSS Score
2.63%
86.0th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSveyon0, 4.5.3+repack1-1build1, 4.5.3+repack1-1build2
Ubuntu:16.04:LTSssvnc1.0.29-2build1, 0, *
Ubuntu:22.04:LTSx2vnc0, 1.7.2-6
Ubuntu:14.04:LTSx11vnc0, 0.9.13-1.1
Ubuntu:24.04:LTSveyon*, 0, 4.7.5+repack1-1ubuntu3
Ubuntu:20.04:LTSx2vnc0, 1.7.2-6
Ubuntu:25.10veyon0, 4.9.7+repack1-1, 4.7.5+repack1-1ubuntu7
Ubuntu:18.04:LTStightvnc1.3.10-0ubuntu4, 0, 1.3.10-0ubuntu3
Ubuntu:25.10tightvnc*, 0, 1:1.3.10-9
Ubuntu:18.04:LTSx2vnc1.7.2-6, 0
Ubuntu:24.04:LTSx2vnc1.7.2-6, 0, 1.7.2-6build1
Ubuntu:Pro:14.04:LTStightvnc1.3.9-6.4ubuntu1, 0, 1.3.9-6.4
Ubuntu:24.04:LTSvncsnapshot0, 1.2a-5.2
Ubuntu:22.04:LTSvncsnapshot0, *
Ubuntu:25.10vncsnapshot0, *, 1.2a-7
Ubuntu:16.04:LTSx2vnc1.7.2-5, 0
Ubuntu:25.10x2vnc1.7.2+git20100909.01ced3d-2, 0, 1.7.2+git20100909.01ced3d-1
Ubuntu:22.04:LTSssvnc0, 1.0.29-6, 1.0.29-5build1
Ubuntu:18.04:LTSvncsnapshot0, 1.2a-5.1build1, 1.2a-5.1
Ubuntu:25.10ssvnc1.0.29-6.1, 0, 1.0.29-7

…and 10 more

Timeline

  • Oct 29, 2019 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 22, 2021 EPSS Score
  • Oct 25, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 27, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Nov 5, 2022 EPSS Score
  • Jan 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›