CVE-2020-14401
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-14401
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-14401.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-14401
- Downstream
- Related
- Published
- 2020-06-17T16:15:12Z
- Modified
- 2025-10-15T11:56:27.844369Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.
- References
-
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
- https://github.com/LibVNC/libvncserver/commit/a6788d1da719ae006605b78d22f5a9f170b423af
- https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13
- https://lists.debian.org/debian-lts-announce/2020/06/msg00035.html
- https://lists.debian.org/debian-lts-announce/2020/08/msg00045.html
- https://usn.ubuntu.com/4434-1/
Affected packages
Git / github.com/libvnc/libvncserver
Affected ranges
- Type
- GIT
- Repo
- https://github.com/libvnc/libvncserver
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
LibVNCServer-0.*
LibVNCServer-0.9.10
LibVNCServer-0.9.11
LibVNCServer-0.9.12
LibVNCServer-0.9.8
LibVNCServer-0.9.9
Other
X11VNC_0_9_10
X11VNC_0_9_11
X11VNC_0_9_12
X11VNC_0_9_7
X11VNC_0_9_8
X11VNC_0_9_9
X11VNC_REL_0_9_4
X11VNC_REL_0_9_5
X11VNC_REL_0_9_6
Database specific
vanir_signatures
[
{
"id": "CVE-2020-14401-b9e34590",
"signature_type": "Line",
"target": {
"file": "libvncserver/scale.c"
},
"signature_version": "v1",
"source": "https://github.com/libvnc/libvncserver/commit/a6788d1da719ae006605b78d22f5a9f170b423af",
"digest": {
"threshold": 0.9,
"line_hashes": [
"248208949429347463031521643800921156886",
"267256123706877668341539977664866338222",
"69871433148263572302381190377581994547",
"163000897568946296525180340287495104796"
]
},
"deprecated": false
},
{
"id": "CVE-2020-14401-f7899987",
"signature_type": "Function",
"target": {
"function": "rfbScaledScreenUpdateRect",
"file": "libvncserver/scale.c"
},
"signature_version": "v1",
"source": "https://github.com/libvnc/libvncserver/commit/a6788d1da719ae006605b78d22f5a9f170b423af",
"digest": {
"function_hash": "285897253734337289413665599072403539224",
"length": 3173.0
},
"deprecated": false
}
]