[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2019-15680Date: (C)2019-10-30   (M)2023-12-22


TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.5CVSS Score : 5.0
Exploit Score: 3.9Exploit Score: 10.0
Impact Score: 3.6Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: NONE
Scope: UNCHANGEDIntegrity: NONE
Confidentiality: NONEAvailability: PARTIAL
Integrity: NONE 
Availability: HIGH 
  
Reference:
USN-4407-1
https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html
https://www.openwall.com/lists/oss-security/2018/12/10/5
https://cert-portal.siemens.com/productcert/pdf/ssa-478893.pdf
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-08

CPE    1
cpe:/a:tightvnc:tightvnc:1.3.10
CWE    1
CWE-476
OVAL    7
oval:org.secpod.oval:def:64081
oval:org.secpod.oval:def:64171
oval:org.secpod.oval:def:64165
oval:org.secpod.oval:def:89003304
...

© SecPod Technologies