Security update for LibVNCServer SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:2167-1 Final 1 1 2020-08-07T12:54:44Z current 2020-08-07T12:54:44Z 2020-08-07T12:54:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for LibVNCServer This update for LibVNCServer fixes the following issues: - security update fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock() fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings. fix CVE-2020-14403 [bsc#1173701], out-of-bounds access via encodings. fix CVE-2020-14404 [bsc#1173701], out-of-bounds access via encodings. fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2020-2167,SUSE-2020-2167,SUSE-OpenStack-Cloud-7-2020-2167,SUSE-OpenStack-Cloud-8-2020-2167,SUSE-OpenStack-Cloud-9-2020-2167,SUSE-OpenStack-Cloud-Crowbar-8-2020-2167,SUSE-OpenStack-Cloud-Crowbar-9-2020-2167,SUSE-SLE-SAP-12-SP2-2020-2167,SUSE-SLE-SAP-12-SP3-2020-2167,SUSE-SLE-SAP-12-SP4-2020-2167,SUSE-SLE-SDK-12-SP5-2020-2167,SUSE-SLE-SERVER-12-SP2-2020-2167,SUSE-SLE-SERVER-12-SP2-BCL-2020-2167,SUSE-SLE-SERVER-12-SP3-2020-2167,SUSE-SLE-SERVER-12-SP3-BCL-2020-2167,SUSE-SLE-SERVER-12-SP4-LTSS-2020-2167,SUSE-SLE-SERVER-12-SP5-2020-2167,SUSE-Storage-5-2020-2167 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ Link for SUSE-SU-2020:2167-1 https://lists.suse.com/pipermail/sle-security-updates/2020-August/007241.html E-Mail link for SUSE-SU-2020:2167-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1173477 SUSE Bug 1173477 https://bugzilla.suse.com/1173691 SUSE Bug 1173691 https://bugzilla.suse.com/1173694 SUSE Bug 1173694 https://bugzilla.suse.com/1173700 SUSE Bug 1173700 https://bugzilla.suse.com/1173701 SUSE Bug 1173701 https://bugzilla.suse.com/1173743 SUSE Bug 1173743 https://bugzilla.suse.com/1173874 SUSE Bug 1173874 https://bugzilla.suse.com/1173875 SUSE Bug 1173875 https://bugzilla.suse.com/1173876 SUSE Bug 1173876 https://bugzilla.suse.com/1173880 SUSE Bug 1173880 https://www.suse.com/security/cve/CVE-2017-18922/ SUSE CVE CVE-2017-18922 page https://www.suse.com/security/cve/CVE-2018-21247/ SUSE CVE CVE-2018-21247 page https://www.suse.com/security/cve/CVE-2019-20839/ SUSE CVE CVE-2019-20839 page https://www.suse.com/security/cve/CVE-2019-20840/ SUSE CVE CVE-2019-20840 page https://www.suse.com/security/cve/CVE-2020-14397/ SUSE CVE CVE-2020-14397 page https://www.suse.com/security/cve/CVE-2020-14398/ SUSE CVE CVE-2020-14398 page https://www.suse.com/security/cve/CVE-2020-14399/ SUSE CVE CVE-2020-14399 page https://www.suse.com/security/cve/CVE-2020-14400/ SUSE CVE CVE-2020-14400 page https://www.suse.com/security/cve/CVE-2020-14401/ SUSE CVE CVE-2020-14401 page https://www.suse.com/security/cve/CVE-2020-14402/ SUSE CVE CVE-2020-14402 page https://www.suse.com/security/cve/CVE-2020-14403/ SUSE CVE CVE-2020-14403 page https://www.suse.com/security/cve/CVE-2020-14404/ SUSE CVE CVE-2020-14404 page HPE Helion OpenStack 8 SUSE Enterprise Storage 5 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 libvncclient0-0.9.9-17.31.1 libvncserver0-0.9.9-17.31.1 LibVNCServer-devel-0.9.9-17.31.1 linuxvnc-0.9.9-17.31.1 libvncclient0-0.9.9-17.31.1 as a component of HPE Helion OpenStack 8 libvncserver0-0.9.9-17.31.1 as a component of HPE Helion OpenStack 8 libvncclient0-0.9.9-17.31.1 as a component of SUSE Enterprise Storage 5 libvncserver0-0.9.9-17.31.1 as a component of SUSE Enterprise Storage 5 libvncclient0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libvncserver0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libvncclient0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libvncserver0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libvncclient0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libvncserver0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libvncclient0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libvncserver0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libvncclient0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libvncserver0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libvncclient0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP5 libvncserver0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server 12 SP5 libvncclient0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libvncserver0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libvncclient0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvncserver0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvncclient0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvncserver0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvncclient0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libvncserver0-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 LibVNCServer-devel-0.9.9-17.31.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libvncclient0-0.9.9-17.31.1 as a component of SUSE OpenStack Cloud 7 libvncserver0-0.9.9-17.31.1 as a component of SUSE OpenStack Cloud 7 libvncclient0-0.9.9-17.31.1 as a component of SUSE OpenStack Cloud 8 libvncserver0-0.9.9-17.31.1 as a component of SUSE OpenStack Cloud 8 libvncclient0-0.9.9-17.31.1 as a component of SUSE OpenStack Cloud 9 libvncserver0-0.9.9-17.31.1 as a component of SUSE OpenStack Cloud 9 libvncclient0-0.9.9-17.31.1 as a component of SUSE OpenStack Cloud Crowbar 8 libvncserver0-0.9.9-17.31.1 as a component of SUSE OpenStack Cloud Crowbar 8 libvncclient0-0.9.9-17.31.1 as a component of SUSE OpenStack Cloud Crowbar 9 libvncserver0-0.9.9-17.31.1 as a component of SUSE OpenStack Cloud Crowbar 9 It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow. CVE-2017-18922 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2017-18922.html CVE-2017-18922 https://bugzilla.suse.com/1173477 SUSE Bug 1173477 An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function. CVE-2018-21247 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2018-21247.html CVE-2018-21247 https://bugzilla.suse.com/1173477 SUSE Bug 1173477 https://bugzilla.suse.com/1173874 SUSE Bug 1173874 libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename. CVE-2019-20839 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2019-20839.html CVE-2019-20839 https://bugzilla.suse.com/1173477 SUSE Bug 1173477 https://bugzilla.suse.com/1173875 SUSE Bug 1173875 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode. CVE-2019-20840 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2019-20840.html CVE-2019-20840 https://bugzilla.suse.com/1173477 SUSE Bug 1173477 https://bugzilla.suse.com/1173876 SUSE Bug 1173876 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference. CVE-2020-14397 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2020-14397.html CVE-2020-14397 https://bugzilla.suse.com/1173477 SUSE Bug 1173477 https://bugzilla.suse.com/1173700 SUSE Bug 1173700 An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c. CVE-2020-14398 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2020-14398.html CVE-2020-14398 https://bugzilla.suse.com/1173477 SUSE Bug 1173477 https://bugzilla.suse.com/1173880 SUSE Bug 1173880 ** DISPUTED ** An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed." CVE-2020-14399 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2020-14399.html CVE-2020-14399 https://bugzilla.suse.com/1173477 SUSE Bug 1173477 https://bugzilla.suse.com/1173743 SUSE Bug 1173743 ** DISPUTED ** An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary. CVE-2020-14400 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2020-14400.html CVE-2020-14400 https://bugzilla.suse.com/1173477 SUSE Bug 1173477 https://bugzilla.suse.com/1173691 SUSE Bug 1173691 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow. CVE-2020-14401 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2020-14401.html CVE-2020-14401 https://bugzilla.suse.com/1173477 SUSE Bug 1173477 https://bugzilla.suse.com/1173694 SUSE Bug 1173694 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings. CVE-2020-14402 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2020-14402.html CVE-2020-14402 https://bugzilla.suse.com/1173477 SUSE Bug 1173477 https://bugzilla.suse.com/1173701 SUSE Bug 1173701 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings. CVE-2020-14403 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2020-14403.html CVE-2020-14403 https://bugzilla.suse.com/1173701 SUSE Bug 1173701 An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings. CVE-2020-14404 HPE Helion OpenStack 8:libvncclient0-0.9.9-17.31.1 HPE Helion OpenStack 8:libvncserver0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncclient0-0.9.9-17.31.1 SUSE Enterprise Storage 5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-BCL:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP3-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP4-LTSS:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncclient0-0.9.9-17.31.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libvncserver0-0.9.9-17.31.1 SUSE Linux Enterprise Software Development Kit 12 SP5:LibVNCServer-devel-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 7:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud 9:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 8:libvncserver0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncclient0-0.9.9-17.31.1 SUSE OpenStack Cloud Crowbar 9:libvncserver0-0.9.9-17.31.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/ https://www.suse.com/security/cve/CVE-2020-14404.html CVE-2020-14404 https://bugzilla.suse.com/1173701 SUSE Bug 1173701