Summary
It was discovered that LibVNCServer incorrectly handled certain internals.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
Vino package ships with a LibVNCServer source and all listed releases were
affected for this package.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libvncserver | 0.9.10+dfsg-3ubuntu0.16.04.6 |
| Ubuntu · 16.04 LTS 16.04:LTS | vino | 3.8.1-0ubuntu9.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | libvncserver | 0.9.11+dfsg-1ubuntu1.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | vino | 3.22.0-3ubuntu1.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | libvncserver | 0.9.12+dfsg-9ubuntu0.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | vino | 3.22.0-5ubuntu2.2 |
Vulnerabilities 1
-
Unscored —
A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a spec…
References
-
report
https://ubuntu.com/security/CVE-2020-25708