Memory leak in LibVNCServer - CVE-2020-29260

Vulnerability identifier: #VU67972

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-29260

CWE-ID: CWE-401

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform DoS attack on the target system.

The vulnerability exists due memory leak within the rfbClientCleanup() function. A remote attacker can force the server to leak memory and perform denial of service attack.

LibVNCServer
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Workstation Extension
openSUSE Leap
openEuler
Anolis OS
SUSE Linux Enterprise Module for Packagehub Subpackages
libvncserver0-debuginfo
libvncserver0
libvncclient0-debuginfo
LibVNCServer-debugsource
LibVNCServer-devel
libvncclient0
libvncserver-doc
libvncserver-devel
libvncserver
libvncserver-debuginfo
libvncserver-debugsource
libvncserver1-debuginfo
libvncserver1
libvncclient1-debuginfo
libvncclient1

Install update from vendor's website.

LibVNCServer - update to 0.9.14
libvncserver0-debuginfo - addressed in versions 0.9.9-17.41.1, 0.9.10-150000.4.29.1
libvncserver0 - addressed in versions 0.9.9-17.41.1, 0.9.10-150000.4.29.1
libvncclient0-debuginfo - addressed in versions 0.9.9-17.41.1, 0.9.10-150000.4.29.1
LibVNCServer-debugsource - addressed in versions 0.9.9-17.41.1, 0.9.10-150000.4.29.1, 0.9.13-150400.3.3.1
LibVNCServer-devel - addressed in versions 0.9.9-17.41.1, 0.9.10-150000.4.29.1, 0.9.13-150400.3.3.1
libvncclient0 - addressed in versions 0.9.9-17.41.1, 0.9.10-150000.4.29.1
libvncserver-doc - update to 0.9.13-2
libvncserver-devel - update to 0.9.13-2
libvncserver - update to 0.9.13-2
libvncserver - update to 0.9.13-3
libvncserver-debuginfo - update to 0.9.13-3
libvncserver-devel - update to 0.9.13-3
libvncserver-debugsource - update to 0.9.13-3
libvncserver1-debuginfo - update to 0.9.13-150400.3.3.1
libvncserver1 - update to 0.9.13-150400.3.3.1
libvncclient1-debuginfo - update to 0.9.13-150400.3.3.1
libvncclient1 - update to 0.9.13-150400.3.3.1

• https://github.com/LibVNC/libvncserver/commit/bef41f6ec4097a8ee094f90a1b34a708fbd757ec
• https://lists.debian.org/debian-lts-announce/2022/09/msg00035.html

• Denial of service in LibVNCServer
• SUSE update for LibVNCServer
• SUSE update for LibVNCServer
• SUSE update for LibVNCServer
• openEuler 22.03 LTS update for libvncserver
• Anolis OS update for libvncserver