Summary
[0.9.9-14]
- Fix CVE-2019-15690 (an integer overflow in HandleCursorShape() in a client)
(bug #1814339)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libvncserver | 0:0.9.9-14.el7_7 |
| Oracle Linux · 7 | libvncserver-devel | 0:0.9.9-14.el7_7 |
Vulnerabilities 1
-
High 8.8
LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() func…