VDB
GHSA-28h7-jgqq-qp89
GHSA-28h7-jgqq-qp89
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Record from GitHub Advisory Database · Published May 13, 2022
UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1204.
Risk scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
- May 13, 2022 CVE Published
- Apr 29, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-28h7-jgqq-qp89
vulnetix vdb fixes GHSA-28h7-jgqq-qp89Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-28h7-jgqq-qp89/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf url
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-008-ultravnc-heap-based-buffer-overflow url
- https://nvd.nist.gov/vuln/detail/CVE-2019-8262 advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf url
- https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf url
- https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11 url
- https://www.us-cert.gov/ics/advisories/icsa-20-161-06 url