Red Hat Security AdvisoryRHSA-2020:3456
libvncserver security update
Released 2020-08-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v. 8.1) libvncserver-0.9.11-9.el8_1.3, libvncserver-devel-0.9.11-9.el8_1.3
- Red Hat Enterprise Linux AppStream EUS (v. 8.1) libvncserver-0.9.11-9.el8_1.3
Fixes 1 record
Priority MEDIUM 46
It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02259 · Published 2020-06-30 · Fixed CWE-787