Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-15690: No description is available for this CVE. 1811948: CVE-2019-15690 libvncserver: HandleCursorShape() integer overflow resulting in heap-based buffer overflow
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libvncserver | 0:0.9.9-14.amzn2 |
| Amazon Linux · 2 | libvncserver-debuginfo | 0:0.9.9-14.amzn2 |
| Amazon Linux · 2 | libvncserver-devel | 0:0.9.9-14.amzn2 |
Vulnerabilities 1
-
High 8.8
LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() func…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-15690.html