CVE-2019-15683

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2019-15683
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-15683.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-15683
Published
2019-10-29T19:15:18.203Z
Modified
2025-11-14T09:16:57.669607Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a536136e. This could possibly result into remote code execution, since stack frame is not protected with stack canary. This attack appear to be exploitable via network connectivity. To exploit this vulnerability authorization on server is required. These issues have been fixed in commit cea98166008301e614e0d36776bf9435a536136e.

References

Affected packages

Git / github.com/turbovnc/turbovnc

Affected ranges

Type
GIT
Repo
https://github.com/turbovnc/turbovnc
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
cea98166008301e614e0d36776bf9435a536136e

Affected versions

0.*

0.1
0.1.1
0.2
0.3
0.3.1
0.3.2
0.3.3
0.4
0.4rc
0.5
0.5.1
0.6

1.*

1.2beta1
1.2rc

2.*

2.0
2.0beta1
2.1
2.1.1
2.1.2
2.1beta1
2.1beta2
2.2
2.2.1
2.2.2
2.2beta1

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "target": {
            "function": "rfbProcessClientNormalMessage",
            "file": "unix/Xvnc/programs/Xserver/hw/vnc/rfbserver.c"
        },
        "id": "CVE-2019-15683-24c58f43",
        "digest": {
            "function_hash": "99271857532757596267321357888603221195",
            "length": 25979.0
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/turbovnc/turbovnc/commit/cea98166008301e614e0d36776bf9435a536136e"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "rfbOptPamAuth",
            "file": "unix/Xvnc/programs/Xserver/hw/vnc/auth.c"
        },
        "id": "CVE-2019-15683-519a4567",
        "digest": {
            "function_hash": "252046010153634044181616880237114927099",
            "length": 274.0
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/turbovnc/turbovnc/commit/cea98166008301e614e0d36776bf9435a536136e"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "unix/Xvnc/programs/Xserver/hw/vnc/rfbserver.c"
        },
        "id": "CVE-2019-15683-682fe39b",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "84989811668681235090654368324166371359",
                "225340399570493989462751207585890862200",
                "149772819929820407629987575473578201407",
                "132530169444806169117064799156249083832",
                "163740370135212854819989345150057617624",
                "38316136736773991526668306957313468086",
                "245053446811325642935502166683140978081",
                "55468130680685345889772970651641312907",
                "98076062974239266064179367437695347517"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://github.com/turbovnc/turbovnc/commit/cea98166008301e614e0d36776bf9435a536136e"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "unix/Xvnc/programs/Xserver/hw/vnc/auth.c"
        },
        "id": "CVE-2019-15683-d30e5de5",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "56383548371990220998746184757576774335",
                "5540945459748890729259231525063793789",
                "235335385123716383698294936850212306597",
                "51799300084955834327334211278794448441"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://github.com/turbovnc/turbovnc/commit/cea98166008301e614e0d36776bf9435a536136e"
    }
]