USN-4547-2: SSVNC vulnerabilities
28 September 2020
Several security issues were fixed in SSVNC.
- ssvnc - Enhanced TightVNC viewer with SSL/SSH tunnel helper
It was discovered that the LibVNCClient vendored in SSVNC incorrectly handled
certain packet lengths. A remote attacker could possibly use this issue to
obtain sensitive information, cause a denial of service, or execute arbitrary
code. (CVE-2018-20020, CVE-2018-20021, CVE-2018-20022, CVE-2018-2024)