Oval Definition:oval:org.opensuse.security:def:66306
Revision Date:2020-12-01Version:1
Title:Security update for LibVNCServer (Important)
Description:

This update for LibVNCServer fixes the following issues:

- security update - added patches fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak + LibVNCServer-CVE-2018-21247.patch fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock() + LibVNCServer-CVE-2019-20839.patch fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service + LibVNCServer-CVE-2019-20840.patch fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c + LibVNCServer-CVE-2020-14398.patch fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c + LibVNCServer-CVE-2020-14397.patch fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. + LibVNCServer-CVE-2020-14399.patch fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. + LibVNCServer-CVE-2020-14400.patch fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c + LibVNCServer-CVE-2020-14401.patch fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings. + LibVNCServer-CVE-2020-14402,14403,14404.patch fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
Family:unixClass:patch
Status:Reference(s):1173477
1173691
1173694
1173700
1173701
1173743
1173874
1173875
1173876
1173880
CVE-2017-18922
CVE-2018-16428
CVE-2018-16429
CVE-2018-21247
CVE-2019-12450
CVE-2019-20839
CVE-2019-20840
CVE-2020-14397
CVE-2020-14398
CVE-2020-14399
CVE-2020-14400
CVE-2020-14401
CVE-2020-14402
CVE-2020-6750
SUSE-SU-2020:1922-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Workstation Extension 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND Package Information
  • glib2-devel-2.62.5-1 is installed
  • OR glib2-lang-2.62.5-1 is installed
  • OR glib2-tools-2.62.5-1 is installed
  • OR libgio-2_0-0-2.62.5-1 is installed
  • OR libgio-2_0-0-32bit-2.62.5-1 is installed
  • OR libglib-2_0-0-2.62.5-1 is installed
  • OR libglib-2_0-0-32bit-2.62.5-1 is installed
  • OR libgmodule-2_0-0-2.62.5-1 is installed
  • OR libgmodule-2_0-0-32bit-2.62.5-1 is installed
  • OR libgobject-2_0-0-2.62.5-1 is installed
  • OR libgobject-2_0-0-32bit-2.62.5-1 is installed
  • OR libgthread-2_0-0-2.62.5-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • LibVNCServer-0.9.10-4.22 is installed
  • OR libvncclient0-0.9.10-4.22 is installed
  • BACK