Skip to content
Fencer Vulns
high 7.5

CVE-2019-15681 json

LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker…

published 2019-10-29 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-6620

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.9%
EPSS 2.9% chance of exploitation in 30 days, percentile 87%
public exploits
0
none known

Summary

LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.

Patch / fix

  • libvnc_project libvncserver 0.9.12
  • siemens simatic_itc1500_firmware 3.2.1.0
  • siemens simatic_itc1500_pro_firmware 3.2.1.0
  • siemens simatic_itc1900_firmware 3.2.1.0
  • siemens simatic_itc1900_pro_firmware 3.2.1.0
  • siemens simatic_itc2200_firmware 3.2.1.0
  • siemens simatic_itc2200_pro_firmware 3.2.1.0
  • vino Debian 12 3.22.0-6
  • tightvnc Debian 14, Debian 13, Debian 12 1:1.3.9-9.1
  • libvncserver Debian 14, Debian 13, Debian 12 0.9.12+dfsg-3

debian advisories DEBIAN-CVE-2019-15681

  • vino Ubuntu 16.04 LTS 3.8.1-0ubuntu9.3
  • vino Ubuntu 18.04 LTS 3.22.0-3ubuntu1.1
  • vino Ubuntu 20.04 LTS 3.22.0-5ubuntu2.1
  • italc Ubuntu 16.04 LTS 1:2.0.2+dfsg1-4ubuntu0.1
  • italc Ubuntu 18.04 LTS 1:3.0.3+dfsg1-3ubuntu0.1
  • libvncserver Ubuntu 16.04 LTS 0.9.10+dfsg-3ubuntu0.16.04.4
  • libvncserver Ubuntu 18.04 LTS 0.9.11+dfsg-1ubuntu1.2
  • tightvnc Ubuntu Pro 14.04 LTS 1.3.9-6.5+deb8u1build0.14.04.1~esm1

ubuntu advisories UBUNTU-CVE-2019-15681

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • vino SLE Module for Desktop Applications 15 SP1 3.22.0-3.6.76
  • LibVNCServer SLE Workstation Extension 15 SP1, SLE Module for Package Hub 15 SP1 0.9.10-4.14.1
  • LibVNCServer SLES 11 SP4-LTSS, SLE Point of Sale 11 SP3 0.9.1-160.14.1
  • LibVNCServer SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES for SAP 12 SP3 +16 more 0.9.9-17.19.1
  • vino SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES 12 SP5 +1 more 3.20.2-7.3.21

suse advisories SUSE-SU-2020:2009-1SUSE-SU-2020:1164-2SUSE-SU-2020:14355-1SUSE-SU-2020:1165-1SUSE-SU-2020:1164-1SUSE-SU-2020:0955-1

  • vino openSUSE Tumbleweed 3.22.0-7.9
  • vino openSUSE Leap 15.1 3.22.0-lp151.4.3.1
  • LibVNCServer openSUSE Leap 15.1 0.9.10-lp151.7.3.1

opensuse advisories openSUSE-SU-2024:11498-1openSUSE-SU-2020:1071-1openSUSE-SU-2020:0624-1

  • libvncserver Alpine 3.10, Alpine 3.9, Alpine 3.8 +1 more 0.9.11-r3
  • libvncserver Alpine 3.24, Alpine 3.23, Alpine 3.22 +11 more 0.9.12-r1

alpine advisories ALPINE-CVE-2019-15681

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2019-15681 updated cvss 5.3

libvncserver: information disclosure and ASLR bypass

  • Red Hat Enterprise Linux 6 vino, libvncserver
    affected: no fix planned “Out of support scope”
  • Red Hat Enterprise Linux 7 vino, libvncserver Red Hat Enterprise Linux 8 vino, libvncserver
    affected: no fix available “Fix deferred”

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-21-350-12 updated cvss 7.5

Siemens SIMATIC ITC

  • Siemens SIMATIC ITC1500 V3 <V3.2.1.0 Siemens SIMATIC ITC1500 V3 PRO <V3.2.1.0 Siemens SIMATIC ITC1900 V3 <V3.2.1.0 Siemens SIMATIC ITC1900 V3 PRO <V3.2.1.0 Siemens SIMATIC ITC2200 V3 <V3.2.1.0 Siemens SIMATIC ITC2200 V3 PRO <V3.2.1.0
    affected: fixed in V3.2.1.0, mitigation support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

2.91% chance of exploitation in the next 30 days, higher than 87% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • Kaspersky LibVNC

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.