The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1811 advisory.

    - Fix CVE-2020-25708       Resolves: #1898078
    - Fix CVE-2019-20839       Resolves: #1851032
    - Fix CVE-2018-21247       Resolves: #1852516
    - Fix CVE-2020-14405       Resolves: #1860527

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for LibVNCServer fixes the following issues :

  - CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c     has a divide by zero which could result in DoS

This update was imported from the SUSE:SLE-15:Update update project.

The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2020:14549-1 advisory.

  - A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw     to send a specially crafted message that, when processed by the VNC server, would lead to a floating point     exception, resulting in a denial of service. (CVE-2020-25708)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Heap-based buffer overflow in ultra.c in LibVNCClient     in LibVNCServer before 0.9.11 allows remote servers to     cause a denial of service (application crash) or     possibly execute arbitrary code via a crafted     FramebufferUpdate message with the Ultra type tile,     such that the LZO payload decompressed length exceeds     what is specified by the tile     dimensions.(CVE-2016-9942)

  - It was discovered that websockets.c in LibVNCServer     prior to 0.9.12 did not properly decode certain     WebSocket frames. A malicious attacker could exploit     this by sending specially crafted WebSocket frames to a     server, causing a heap-based buffer     overflow.(CVE-2017-18922)

  - LibVNC commit before     d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a     memory leak (CWE-655) in VNC server code, which allow     an attacker to read stack memory and can be abused for     information disclosure. Combined with another     vulnerability, it can be used to leak stack memory and     bypass ASLR. This attack appear to be exploitable via     network connectivity. These vulnerabilities have been     fixed in commit     d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.(CVE-2019-1568     1)

  - A divide by zero issue was found to occur in     libvncserver-0.9.12. A malicious client could use this     flaw to send a specially crafted message that, when     processed by the VNC server, would lead to a floating     point exception, resulting in a denial of     service.(CVE-2020-25708)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A divide by zero issue was found to occur in     libvncserver-0.9.12. A malicious client could use this     flaw to send a specially crafted message that, when     processed by the VNC server, would lead to a floating     point exception, resulting in a denial of     service.(CVE-2020-25708)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1811 advisory.

  - libvncserver: uninitialized memory contents are vulnerable to Information Leak (CVE-2018-21247)

  - libvncserver: buffer overflow in ConnectClientToUnixSock() (CVE-2019-20839)

  - libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference (CVE-2020-14397)

  - libvncserver: libvncclient/rfbproto.c does not limit TextChat size (CVE-2020-14405)

  - libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS (CVE-2020-25708)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for LibVNCServer fixes the following issues :

CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
149968	Oracle Linux 8 : libvncserver (ELSA-2021-1811)	Nessus	Oracle Linux Local Security Checks	2021/5/26	2024/10/22	high
143328	openSUSE Security Update : LibVNCServer (openSUSE-2020-2097)	Nessus	SuSE Local Security Checks	2020/11/30	2024/2/7	high
143345	openSUSE Security Update : LibVNCServer (openSUSE-2020-2025)	Nessus	SuSE Local Security Checks	2020/11/30	2024/2/7	high
150527	SUSE SLES11 Security Update : LibVNCServer (SUSE-SU-2020:14549-1)	Nessus	SuSE Local Security Checks	2021/6/10	2023/12/26	high
145206	EulerOS 2.0 SP3 : libvncserver (EulerOS-SA-2021-1091)	Nessus	Huawei Local Security Checks	2021/1/20	2024/1/29	critical
148083	EulerOS 2.0 SP5 : libvncserver (EulerOS-SA-2021-1688)	Nessus	Huawei Local Security Checks	2021/3/24	2024/1/8	high
149728	CentOS 8 : libvncserver (CESA-2021:1811)	Nessus	CentOS Local Security Checks	2021/5/19	2024/1/1	high
143668	SUSE SLED15 / SLES15 Security Update : LibVNCServer (SUSE-SU-2020:3515-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/6	high
143764	SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2020:3550-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	high

检测

插件搜索

high

high

high

high

critical

high

high

high

high