VYPR
High severity7.5NVD Advisory· Published Jun 17, 2020· Updated Jun 17, 2026

CVE-2020-14396

CVE-2020-14396

Description

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • cpe:2.3:a:libvnc_project:libvncserver:*:*:*:*:*:*:*:*
    Range: <=0.9.12
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 5 more
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:siemens:simatic_itc1500_pro_firmware:*:*:*:*:*:*:*:*
    Range: >=3.0.0.0,<3.2.1.0
  • cpe:2.3:o:siemens:simatic_itc1900_firmware:*:*:*:*:*:*:*:*
    Range: >=3.0.0.0,<3.2.1.0
  • cpe:2.3:o:siemens:simatic_itc1900_pro_firmware:*:*:*:*:*:*:*:*
    Range: >=3.0.0.0,<3.2.1.0
  • cpe:2.3:o:siemens:simatic_itc2200_firmware:*:*:*:*:*:*:*:*
    Range: >=3.0.0.0,<3.2.1.0
  • cpe:2.3:o:siemens:simatic_itc2200_pro_firmware:*:*:*:*:*:*:*:*
    Range: >=3.0.0.0,<3.2.1.0
  • Libvncserver/Libvncservercpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <0.9.13
  • cpe:2.3:o:siemens:simatic_itc1500_firmware:*:*:*:*:*:*:*:*
    Range: >=3.0.0.0,<3.2.1.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.