{"schemaVersion":3,"id":"CVE-2019-15681","aliases":["ALPINE-CVE-2019-15681","MGASA-2019-0368","SUSE-SU-2020:0955-1","SUSE-SU-2020:2009-1","UBUNTU-CVE-2019-15681","DEBIAN-CVE-2019-15681","DLA-1977-1","openSUSE-SU-2020:1071-1","openSUSE-SU-2024:11498-1"],"status":"published","duplicateOf":null,"title":null,"description":"LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.","dates":{"published":"2019-10-29T16:04:51.000Z","modified":"2024-08-05T00:56:22.452Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true}]},"epss":{"probability":0.02906,"percentile":0.8678,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02906},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02906,"percentile":0.8678}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02906,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02906,"percentile":0.8678}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-665","name":"Improper Initialization","description":"The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/665.html"}],"affected":[{"vendor":"alpine","product":"libvncserver","name":"libvncserver","label":"libvncserver","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/libvncserver","purlType":"apk","versions":[{"text":"< 0.9.11-r3","noFixRecorded":false,"fixedIn":null},{"text":"< 0.9.12-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.11-r3 | < 0.9.12-r1","eol":null,"hubHref":null},{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"14.04","noFixRecorded":false,"fixedIn":null},{"text":"16.04","noFixRecorded":false,"fixedIn":null},{"text":"18.04","noFixRecorded":false,"fixedIn":null},{"text":"18.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"14.04 | 16.04 | 18.04 | 18.10","eol":{"isEol":true,"eolDate":"2019-04-02T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"14.04","label":"14.04 'Trusty Tahr' (LTS)","eolFrom":"2019-04-02T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"14.04.6"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"libvncserver","name":"libvncserver","label":"libvncserver","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libvncserver","purlType":"deb","versions":[{"text":"< 0.9.12+dfsg-3","noFixRecorded":false,"fixedIn":null},{"text":"< 0.9.9+dfsg2-6.1+deb8u6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.12+dfsg-3 | < 0.9.9+dfsg2-6.1+deb8u6","eol":null,"hubHref":null},{"vendor":"debian","product":"tightvnc","name":"tightvnc","label":"tightvnc","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/tightvnc","purlType":"deb","versions":[{"text":"< 1:1.3.9-9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.3.9-9.1","eol":null,"hubHref":null},{"vendor":"debian","product":"vino","name":"vino","label":"vino","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/vino","purlType":"deb","versions":[{"text":"< 3.22.0-6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.22.0-6","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"italc","name":"italc","label":"italc","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/italc","purlType":"deb","versions":[{"text":"< 1:2.0.2+dfsg1-4ubuntu0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:3.0.3+dfsg1-3ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.0.2+dfsg1-4ubuntu0.1 | < 1:3.0.3+dfsg1-3ubuntu0.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"krfb","name":"krfb","label":"krfb","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/krfb","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libvncserver","name":"libvncserver","label":"libvncserver","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libvncserver","purlType":"deb","versions":[{"text":"< 0.9.10+dfsg-3ubuntu0.16.04.4","noFixRecorded":false,"fixedIn":null},{"text":"< 0.9.11+dfsg-1ubuntu1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.10+dfsg-3ubuntu0.16.04.4 | < 0.9.11+dfsg-1ubuntu1.2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"tightvnc","name":"tightvnc","label":"tightvnc","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/tightvnc","purlType":"deb","versions":[{"text":"< 1.3.9-6.5+deb8u1build0.14.04.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.3.9-6.5+deb8u1build0.14.04.1~esm1 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"veyon","name":"veyon","label":"veyon","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/veyon","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"vino","name":"vino","label":"vino","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/vino","purlType":"deb","versions":[{"text":"< 3.8.1-0ubuntu9.3","noFixRecorded":false,"fixedIn":null},{"text":"< 3.22.0-3ubuntu1.1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.22.0-5ubuntu2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.1-0ubuntu9.3 | < 3.22.0-3ubuntu1.1 | < 3.22.0-5ubuntu2.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"x11vnc","name":"x11vnc","label":"x11vnc","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/x11vnc","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0","noFixRecorded":false,"fixedIn":null},{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0 | 9.0","eol":{"isEol":true,"eolDate":"2020-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"8","label":"8 (Jessie)","eolFrom":"2020-06-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"8.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"kaspersky","product":"libvnc","name":"LibVNC","label":"libvnc","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"0.9.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"0.9.12","eol":null,"hubHref":"/vendor/kaspersky/libvnc"},{"vendor":"libvnc_project","product":"libvncserver","name":"libvncserver","label":"libvncserver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.9.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.12","eol":null,"hubHref":"/vendor/libvnc_project/libvncserver"},{"vendor":"mageia","product":"libvncserver","name":"libvncserver","label":"libvncserver","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libvncserver","purlType":"rpm","versions":[{"text":"< 0.9.12-2.1.mga7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.12-2.1.mga7","eol":null,"hubHref":null},{"vendor":"opensuse","product":"vino&distro=openSUSE Leap 15.1","name":"vino","label":"vino&distro=openSUSE Leap 15.1","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/vino&distro=openSUSE Leap 15.1","purlType":"rpm","versions":[{"text":"< 3.22.0-lp151.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.22.0-lp151.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"vino&distro=openSUSE Tumbleweed","name":"vino","label":"vino&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/vino&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 3.22.0-7.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.22.0-7.9","eol":null,"hubHref":null},{"vendor":"suse","product":"vino&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP1","name":"vino","label":"vino&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/vino&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP1","purlType":"rpm","versions":[{"text":"< 3.22.0-3.6.76","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.22.0-3.6.76","eol":null,"hubHref":null},{"vendor":"suse","product":"vino&distro=SUSE Linux Enterprise Server 12 SP4","name":"vino","label":"vino&distro=SUSE Linux Enterprise Server 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/vino&distro=SUSE Linux Enterprise Server 12 SP4","purlType":"rpm","versions":[{"text":"< 3.20.2-7.3.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.20.2-7.3.21","eol":null,"hubHref":null},{"vendor":"suse","product":"vino&distro=SUSE Linux Enterprise Server 12 SP5","name":"vino","label":"vino&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/vino&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 3.20.2-7.3.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.20.2-7.3.21","eol":null,"hubHref":null},{"vendor":"suse","product":"vino&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"vino","label":"vino&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/vino&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 3.20.2-7.3.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.20.2-7.3.21","eol":null,"hubHref":null},{"vendor":"suse","product":"vino&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"vino","label":"vino&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/vino&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 3.20.2-7.3.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.20.2-7.3.21","eol":null,"hubHref":null},{"vendor":"siemens","product":"simatic_itc1500_firmware","name":"simatic itc1500 firmware","label":"simatic_itc1500_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.0, < 3.2.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.0, < 3.2.1.0","eol":null,"hubHref":"/vendor/siemens/simatic_itc1500"},{"vendor":"siemens","product":"simatic_itc1500_pro_firmware","name":"simatic itc1500 pro firmware","label":"simatic_itc1500_pro_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.0, < 3.2.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.0, < 3.2.1.0","eol":null,"hubHref":"/vendor/siemens/simatic_itc1500_pro"},{"vendor":"siemens","product":"simatic_itc1900_firmware","name":"simatic itc1900 firmware","label":"simatic_itc1900_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.0, < 3.2.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.0, < 3.2.1.0","eol":null,"hubHref":"/vendor/siemens/simatic_itc1900"},{"vendor":"siemens","product":"simatic_itc1900_pro_firmware","name":"simatic itc1900 pro firmware","label":"simatic_itc1900_pro_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.0, < 3.2.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.0, < 3.2.1.0","eol":null,"hubHref":"/vendor/siemens/simatic_itc1900_pro"},{"vendor":"siemens","product":"simatic_itc2200_firmware","name":"simatic itc2200 firmware","label":"simatic_itc2200_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.0, < 3.2.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.0, < 3.2.1.0","eol":null,"hubHref":"/vendor/siemens/simatic_itc2200"},{"vendor":"siemens","product":"simatic_itc2200_pro_firmware","name":"simatic itc2200 pro firmware","label":"simatic_itc2200_pro_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 3.0.0.0, < 3.2.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.0.0.0, < 3.2.1.0","eol":null,"hubHref":"/vendor/siemens/simatic_itc2200_pro"}],"affectedCount":29,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://github.com/LibVNC/libvncserver/commit/d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a","label":"github.com/LibVNC/libvncserver/commit/d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a","hostname":"github.com","tags":["X Refsource MISC","Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00039.html","label":"lists.debian.org/debian-lts-announce/2019/10/msg00039.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html","label":"lists.debian.org/debian-lts-announce/2019/10/msg00042.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00032.html","label":"lists.debian.org/debian-lts-announce/2019/11/msg00032.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html","label":"lists.debian.org/debian-lts-announce/2019/12/msg00028.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00027.html","label":"lists.opensuse.org/opensuse-security-announce/2020-05/msg00027.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4407-1/","label":"usn.ubuntu.com/4407-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00073.html","label":"lists.opensuse.org/opensuse-security-announce/2020-07/msg00073.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4547-1/","label":"usn.ubuntu.com/4547-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4573-1/","label":"usn.ubuntu.com/4573-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4587-1/","label":"usn.ubuntu.com/4587-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf","label":"cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf","hostname":"cert-portal.siemens.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-15681","label":"security.alpinelinux.org/vuln/CVE-2019-15681","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0368.html","label":"advisories.mageia.org/MGASA-2019-0368.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25788","label":"bugs.mageia.org/show_bug.cgi?id=25788","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.debian.org/lts/security/2019/dla-2014","label":"www.debian.org/lts/security/2019/dla-2014","hostname":"www.debian.org","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200955-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20200955-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1155419","label":"bugzilla.suse.com/1155419","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15681","label":"www.suse.com/security/cve/CVE-2019-15681","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202009-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20202009-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-15681","label":"ubuntu.com/security/CVE-2019-15681","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-4407-1","label":"ubuntu.com/security/notices/USN-4407-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4547-1","label":"ubuntu.com/security/notices/USN-4547-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4573-1","label":"ubuntu.com/security/notices/USN-4573-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4587-1","label":"ubuntu.com/security/notices/USN-4587-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15681","label":"www.cve.org/CVERecord?id=CVE-2019-15681","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-15681","label":"security-tracker.debian.org/tracker/CVE-2019-15681","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WKLAETLUS52X5UOKRNDBTXHHCHX2WSD5/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-1979-1","DLA-2014-1","DLA-2045-1","MGASA-2020-0242","MGASA-2020-0435","OPENSUSE-SU-2020:0624-1","SUSE-SU-2020:1164-1","SUSE-SU-2020:1164-2","SUSE-SU-2020:1165-1","SUSE-SU-2020:14355-1","USN-4407-1","USN-4547-1","USN-4573-1","USN-4587-1"],"duplicates":[],"related":["OPENSUSE-SU-2020:0624-1","SUSE-SU-2020:1164-1","SUSE-SU-2020:1164-2","SUSE-SU-2020:1165-1","SUSE-SU-2020:14355-1","USN-4407-1","USN-4547-1","USN-4573-1","USN-4587-1"]},"timeline":[{"kind":"published","date":"2019-10-29T16:04:51.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T00:56:22.452Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:10:40.837Z","stale":false,"partial":false}}