CVE-2020-14399

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.htmlMailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1860354Issue Tracking, Patch, Third Party Advisory
https://github.com/LibVNC/libvncserver/commit/23e5cbe6b090d7f22982aee909a6a618174d3c2dPatch
https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13Release Notes
https://lists.debian.org/debian-lts-announce/2020/06/msg00035.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00045.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4434-1/Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.htmlMailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1860354Issue Tracking, Patch, Third Party Advisory
https://github.com/LibVNC/libvncserver/commit/23e5cbe6b090d7f22982aee909a6a618174d3c2dPatch
https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13Release Notes
https://lists.debian.org/debian-lts-announce/2020/06/msg00035.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00045.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4434-1/Third Party Advisory

Timeline

Published: Jun 17, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-14406.3<p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exp CVE-2020-144007.5An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. CVE-2020-144016.5An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.CVE-2020-144025.4An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings.CVE-2020-144035.4An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings.CVE-2020-144045.4An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings.CVE-2020-144056.5An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.CVE-2020-144086.1An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login route allows for inject CVE-2020-144097.8SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SD CVE-2020-144105.4SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via CVE-2020-144128.8NeDi 1.9C is vulnerable to Remote Command Execution. System-Snapshot.php improperly escapes shell metacharacters from a POST request. An att CVE-2020-144136.1NeDi 1.9C is vulnerable to XSS because of an incorrect implementation of sanitize() in inc/libmisc.php. This function attempts to escape the