CVE:CVE-2020-14396
CNNVD:CNNVD-202006-1175
LibVNCServer是一款支持在程序中实现VNC（虚拟网络计算）服务器或客户端功能的跨平台C语言库。
LibVNCServer 0.9.13之前版本中的libvncclient/tls_openssl.c文件存在代码问题漏洞。远程攻击者可利用该漏洞导致应用程序崩溃。
solution:Upgrade libvnc_project libvncserver to a higher version than 0.9.12,and avoid the version (,0.9.12]; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,20.04,and avoid the version 14.04,16.04,18.04,18.10,20.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade siemens simatic_itc1500_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1500_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1900_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1900_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc2200_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc2200_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0)