CVE-2019-15680: Null Pointer Dereference
Last updated 11 July 2025
Other sources
TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/tightvncto a version that resolves this vulnerability.Fixed in 1:1.3.10-3Fixed in 1:1.3.10-7Fixed in 1:1.3.10-9Fixed in 1:1.3.10-11 - Upgrade
Upgrade
TightVNCto a version that resolves this vulnerability.Fixed in 1.3.10
Event History
Frequently Asked Questions
What is CVE-2019-15680?
CVE-2019-15680 is a vulnerability in TightVNC code version 1.3.10 that contains a null pointer dereference in the HandleZlibBPP function, leading to a Denial of Service (DoS) attack.
How severe is CVE-2019-15680?
CVE-2019-15680 has a severity rating of high with a score of 7.5.
Which software is affected by CVE-2019-15680?
The affected software includes TightVNC code version 1.3.10, libvncserver packages with specific versions, and Tightvnc packages with specific versions.
How can CVE-2019-15680 be exploited?
CVE-2019-15680 can be exploited through network connectivity.
Where can I find more information about CVE-2019-15680?
More information about CVE-2019-15680 can be found at the MITRE CVE database (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15680) and the Openwall mailing list (https://www.openwall.com/lists/oss-security/2018/12/10/5).