CVE-2020-14396

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-06-17

Last modified

2024-08-04

Weaknesses

CWE-476

Affected products

• Ubuntu Linux (Canonical)
• Debian Linux (Debian)
• Libvncserver (Libvnc Project)
• Simatic Itc1500 Firmware (Siemens)
• Simatic Itc1500 Pro Firmware (Siemens)
• Simatic Itc1900 Firmware (Siemens)
• Simatic Itc1900 Pro Firmware (Siemens)
• Simatic Itc2200 Firmware (Siemens)
• Simatic Itc2200 Pro Firmware (Siemens)

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
• https://github.com/LibVNC/libvncserver/commit/33441d90a506d5f3ae9388f2752901227e430553
• https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13
• https://usn.ubuntu.com/4434-1/