MGASA-2020-0288: vino Mageia

CVSS: UnknownPublished
Published 10-07-2020Last modified 16-04-2026
Open JSON

Vulnerability summary

MGASA-2020-0288 is a vulnerability in vino Mageia with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0
CVE-2020-14397CVE-2020-14400CVE-2020-14402CVE-2020-14403CVE-2020-14404

Timeline

  1. 10-07-2020
    PublishedVulnerability first disclosed.
  2. 16-04-2026
    Last modifiedVulnerability information updated.

Description

Updated vino packages fix security vulnerability The updated package fixes security vulnerabilities: An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference. (CVE-2020-14397) Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. (CVE-2020-14400) libvncserver/corre.c allows out-of-bounds access via encodings. (CVE-2020-14402) libvncserver/hextile.c allows out-of-bounds access via encodings. (CVE-2020-14403) An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings. (CVE-2020-14404)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Mageia1 product
  • vino< 3.22.0-3.2.mga7

1 vendor · 1 product

References

3 links