Description
TightVNC vncviewer 中存在一个堆缓冲区溢出漏洞。此漏洞是由于 rfbproto.c 文件中 InitialiseRFBConnection 中缺少整数值验证导致的。
TightVNC vncviewer CVE-2022-23967 缓冲区溢出漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.nsfocus.net/vulndb/63673
https://avd.aliyun.com/detail?id=AVD-2022-23967
https://github.com/MaherAzzouzi/CVE-2022-23967
https://www.sonicwall.com/blog/tightvnc-heap-buffer-overflow-vulnerability
https://fortiguard.fortinet.com/encyclopedia/ips/51210
https://vuldb.com/?id.191698
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.VNC:OVERFLOW:TIGHTVNC-INIT-RFB.html
https://www.vicarius.io/vsociety/products/22246_54721/tightvnc
https://www.cybersecurity-help.cz/vdb/vulns/60162/
https://nvd.nist.gov/vuln/detail/CVE-2022-23967
https://feedly.com/cve/vendors/tightvnc
https://www.suse.com/security/cve/CVE-2022-23967.html