CVE:CVE-2020-14403
CNNVD:CNNVD-202006-1187
LibVNCServer是一款支持在程序中实现VNC（虚拟网络计算）服务器或客户端功能的跨平台C语言库。
LibVNCServer 0.9.13之前版本中的libvncserver/hextile.c文件存在缓冲区错误漏洞。远程攻击者可利用该漏洞在系统上执行任意代码或导致应用程序崩溃。
solution:Upgrade libvnc_project libvncserver to a higher version than 0.9.12,and avoid the version (,0.9.12]; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,20.04,and avoid the version 14.04,16.04,18.04,18.10,20.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade siemens simatic_itc1500_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1500_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1900_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1900_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc2200_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc2200_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0)