VDB

CVE-2020-25708

CVE-2020-25708 PUBLISHED

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.

EPSS 0.78% · 74.2th percentile

Risk Scores

EPSS Score
0.78%
74.2th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSvino3.22.0-5ubuntu2.1, 3.22.0-5ubuntu2, 0
Ubuntu:Pro:14.04:LTStightvnc1.3.9-6.4, 0, 1.3.9-6.4ubuntu1
Ubuntu:24.04:LTStightvnc0, 1:1.3.10-7, 1:1.3.10-7build2
Ubuntu:18.04:LTSitalc0, 1:3.0.3+dfsg1-1, *
Ubuntu:22.04:LTSvino0
Ubuntu:16.04:LTSlibvncserver0.9.10+dfsg-3ubuntu0.16.04.3, 0.9.10+dfsg-3ubuntu0.16.04.1, 0.9.10+dfsg-3build1
Ubuntu:25.10tightvnc1:1.3.10-10, 0, 1:1.3.10-9
Ubuntu:18.04:LTSvino3.22.0-3ubuntu1.1, 3.8.1-0ubuntu12, 3.22.0-2ubuntu1
Ubuntu:22.04:LTStightvnc0, *, *
Ubuntu:14.04:LTSx11vnc0.9.13-1.1, 0
Ubuntu:24.04:LTSveyon0, 4.7.5+repack1-1build2, 4.7.5+repack1-1ubuntu3
Ubuntu:20.04:LTStightvnc1.3.10-0ubuntu5, 0
Ubuntu:25.10veyon4.7.5+repack1-1ubuntu7, 4.9.7+repack1-1, *
Ubuntu:16.04:LTSvino3.8.1-0ubuntu9.1, 0, 3.8.1-0ubuntu6
Ubuntu:16.04:LTStightvnc1.3.10-0ubuntu2, 0, 1.3.10-0ubuntu3
Ubuntu:18.04:LTStightvnc0, 1.3.10-0ubuntu3, 1.3.10-0ubuntu4
Ubuntu:24.04:LTSvino0
Ubuntu:20.04:LTSveyon4.2.5+repack1-1, 4.3.1+repack1-2build2, 4.3.1+repack1-2build1
Ubuntu:22.04:LTSveyon4.5.3+repack1-1build1, 0, 4.5.3+repack1-1build2
Ubuntu:18.04:LTSlibvncserver0.9.11+dfsg-1ubuntu1.3, 0.9.11+dfsg-1ubuntu1.1, *

…and 2 more

Exploit Intelligence

Timeline

  • Nov 13, 2020 CVE Published
  • Nov 27, 2020 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›