CVE-2019-15692: Buffer Overflow
Published Dec 26, 2019
·Updated
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder due to incorrect value checks. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
Affected Software
2 affected components
TigerVNC TigerVNC<1.10.1
openSUSE Leap=15.1
Remediation
Event History
Dec 26, 2019
CVE Published
via MITRE·02:55 PM
Data Sourced
via MITRE·02:55 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-15692?
CVE-2019-15692 is a vulnerability in TigerVNC version prior to 1.10.1 that allows for a heap buffer overflow.
2
How severe is CVE-2019-15692?
The severity of CVE-2019-15692 is high with a CVSS score of 7.2.
3
How can CVE-2019-15692 be exploited?
CVE-2019-15692 can be exploited through network connections.
4
What is the affected software?
The affected software is Tigervnc versions prior to 1.10.1 and openSUSE Leap 15.1.
5
How can I fix CVE-2019-15692?
To fix CVE-2019-15692, update your Tigervnc installation to version 1.10.1 or newer.