CVE:CVE-2020-14401
CNNVD:CNNVD-202006-1182
LibVNCServer是一款支持在程序中实现VNC（虚拟网络计算）服务器或客户端功能的跨平台C语言库。
LibVNCServer 0.9.13之前版本中的libvncserver/scale.c文件存在输入验证错误漏洞。远程攻击者可利用该漏洞在系统上执行任意代码。
solution:Upgrade libvncserver_project libvncserver to a higher version than 0.9.13,and avoid the version (,0.9.13); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade siemens simatic_itc1500_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1500_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1900_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1900_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc2200_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc2200_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0)