ID de Prueba:	1.3.6.1.4.1.25623.1.1.2.2020.1940
Categoría:	Huawei EulerOS Local Security Checks
Título:	Huawei EulerOS: Security Advisory for libvncserve (EulerOS-SA-2020-1940)
Resumen:	The remote host is missing an update for the Huawei EulerOS 'libvncserve' package(s) announced via the EulerOS-SA-2020-1940 advisory.
Descripción:	Summary: The remote host is missing an update for the Huawei EulerOS 'libvncserve' package(s) announced via the EulerOS-SA-2020-1940 advisory. Vulnerability Insight: An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.(CVE-2018-21247) libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.(CVE-2019-20839) An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.(CVE-2020-14397) An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c.(CVE-2020-14398) An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.(CVE-2020-14399) An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.(CVE-2020-14400) An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.(CVE-2020-14401) An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings.(CVE-2020-14402) An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings.(CVE-2020-14403) An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings.(CVE-2020-14404) An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.(CVE-2020-14405) Affected Software/OS: 'libvncserve' package(s) on Huawei EulerOS V2.0SP5. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-21247 Common Vulnerability Exposure (CVE) ID: CVE-2019-20839 Common Vulnerability Exposure (CVE) ID: CVE-2020-14397 Common Vulnerability Exposure (CVE) ID: CVE-2020-14398 Common Vulnerability Exposure (CVE) ID: CVE-2020-14399 Common Vulnerability Exposure (CVE) ID: CVE-2020-14400 Common Vulnerability Exposure (CVE) ID: CVE-2020-14401 Common Vulnerability Exposure (CVE) ID: CVE-2020-14402 Common Vulnerability Exposure (CVE) ID: CVE-2020-14403 Common Vulnerability Exposure (CVE) ID: CVE-2020-14404 Common Vulnerability Exposure (CVE) ID: CVE-2020-14405
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.