Description
LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker to consume excessive amount of resources like CPU and RAM
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a LibVNC
commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19caffected
References
- https://www.debian.org/security/2019/dsa-4383 ↗
- https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html ↗
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-031-libvnc-infinite-loop/ ↗
- https://usn.ubuntu.com/3877-1/ ↗
- https://security.gentoo.org/glsa/201908-05 ↗
- https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html ↗
- https://lists.debian.org/debian-lts-announce/2019/11/msg00033.html ↗
- https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html ↗
- https://security.gentoo.org/glsa/202006-06 ↗
- https://usn.ubuntu.com/4547-1/ ↗
- https://usn.ubuntu.com/4547-2/ ↗
- https://usn.ubuntu.com/4587-1/ ↗