CVE-2019-15683
Critical
Description
TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a536136e. This could possibly result into remote code execution, since stack frame is not protected with stack canary. This attack appear to be exploitable via network connectivity. To exploit this vulnerability authorization on server is required. These issues have been fixed in commit cea98166008301e614e0d36776bf9435a536136e.
SeverityCritical
CVSS9.8
Exploit probability—
ProductTurbovnc
PublishedOct 29, 2019
First seenOct 29, 2019
Weakness typeCWE-121CWE-121
How to fix
Update
- turbovnc turbovnc2.2.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| turbovnc turbovnc | v < 2.2.3 | 2.2.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.