VDB
GHSA-mv4r-mvcw-2mxv
GHSA-mv4r-mvcw-2mxv
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Record from GitHub Advisory Database · Published May 13, 2022
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.
Risk scores
CVSS 3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
- May 13, 2022 CVE Published
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-mv4r-mvcw-2mxv
vulnetix vdb fixes GHSA-mv4r-mvcw-2mxvOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-mv4r-mvcw-2mxv/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf url
- https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf url
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-011-ultravnc-access-of-memory-location-after-end-of-buffer url
- https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11 url
- https://www.us-cert.gov/ics/advisories/icsa-20-161-06 url
- https://nvd.nist.gov/vuln/detail/CVE-2019-8264 advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf url