ZeroHour

CVE-2020-14400

CVSS 3.1
7.5 high
EPSS
3%p86
Published
()
Modified
Description

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary

Vendors
libvncserver projectdebianopensusecanonical
Products
libvncserver, debian linux, leap, ubuntu linux
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.