rpm package
suse/tightvnc&distro=SUSE Linux Enterprise Point of Sale 11 SP3
pkg:rpm/suse/tightvnc&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-15680 | — | < 1.3.9-81.15.3.1 | 1.3.9-81.15.3.1 | Oct 29, 2019 | TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity. | ||
| CVE-2019-15679 | — | < 1.3.9-81.15.3.1 | 1.3.9-81.15.3.1 | Oct 29, 2019 | TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity. | ||
| CVE-2019-15678 | — | < 1.3.9-81.15.3.1 | 1.3.9-81.15.3.1 | Oct 29, 2019 | TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via network connectivity. | ||
| CVE-2019-8287 | — | < 1.3.9-81.15.3.1 | 1.3.9-81.15.3.1 | Oct 29, 2019 | TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity. |
- CVE-2019-15680Oct 29, 2019affected < 1.3.9-81.15.3.1fixed 1.3.9-81.15.3.1
TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity.
- CVE-2019-15679Oct 29, 2019affected < 1.3.9-81.15.3.1fixed 1.3.9-81.15.3.1
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.
- CVE-2019-15678Oct 29, 2019affected < 1.3.9-81.15.3.1fixed 1.3.9-81.15.3.1
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via network connectivity.
- CVE-2019-8287Oct 29, 2019affected < 1.3.9-81.15.3.1fixed 1.3.9-81.15.3.1
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.