CVE-2019-20839 PUBLISHED

libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.

EPSS 4.08% · 88.5th percentile

Risk Scores

EPSS Score
4.08%
88.5th percentile

Affected Products

VendorProductVersions
Ubuntu:25.10veyon4.7.5+repack1-1ubuntu6, 4.7.5+repack1-1ubuntu7, 4.9.7+repack1-1
Ubuntu:18.04:LTSlibvncserver0, 0.9.11+dfsg-1ubuntu1.2, 0.9.11+dfsg-1ubuntu1.1
Ubuntu:16.04:LTSlibvncserver0.9.10+dfsg-3ubuntu0.16.04.1, 0.9.10+dfsg-3build1, 0.9.10+dfsg-3
Ubuntu:20.04:LTSveyon0, 4.2.5+repack1-1, 4.3.1+repack1-1
Ubuntu:14.04:LTSx11vnc0, 0.9.13-1.1
Ubuntu:24.04:LTSveyon4.7.5+repack1-1ubuntu3, 0, 4.7.5+repack1-1build2
Ubuntu:22.04:LTSveyon4.5.3+repack1-1build1, 0, 4.5.3+repack1-1build2
Ubuntu:20.04:LTSlibvncserver0.9.12+dfsg-8, 0.9.12+dfsg-7, 0.9.12+dfsg-6

Timeline

References

Open in Interactive Console →