CVE-2019-8263CWE-121

CVE-2019-8263: falha em Kaspersky Lab UltraVNC

Publicada em 05 mar 2019 · Atualizada em 16 set 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.5%

UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. User interaction is required to trigger this vulnerability. This vulnerability has been fixed in revision 1206.

Produtos afetados

Kaspersky Lab · UltraVNC

CVEs relacionadas — Kaspersky Lab UltraVNC

No mesmo produto, das mais perigosas para as menos.

CVE-2019-8271—CVE-2019-8271EPSS 8.3%CVE-2019-8274—CVE-2019-8274EPSS 8.3%CVE-2019-8273—CVE-2019-8273EPSS 8.3%CVE-2019-8276—CVE-2019-8276EPSS 5.7%CVE-2019-8269—CVE-2019-8269EPSS 5.7%CVE-2019-8280—CVE-2019-8280EPSS 4.2%

Referências

https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-009-ultravnc-access-of-memory-location-after-end-of-buffer/https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-010-ultravnc-stack-based-buffer-overflow/https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11 https://www.us-cert.gov/ics/advisories/icsa-20-161-06