CVE-2020-14402

Name of the Vulnerable Software and Affected Versions LibVNCServer versions prior to 0.9.13

Description The issue is caused by an out-of-bounds access in the libvncserver/corre.c component of the LibVNCServer library. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For versions prior to 0.9.13, update to version 0.9.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the libvncserver/corre.c component until a patch is available.