CVE-2019-15683 - CVE House
Back to Database
Status published Critical CVE-2019-15683

TurboVNC server code contains stack buffer overflow vulnerability in commit...

Vulnerability Description

TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a536136e. This could possibly result into remote code execution, since stack frame is not protected with stack canary. This attack appear to be exploitable via network connectivity. To exploit this vulnerability authorization on server is required. These issues have been fixed in commit cea98166008301e614e0d36776bf9435a536136e.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-15683

Credits & Attribution

No credits recorded in the NVD database.

References

More from Kaspersky

View All →
CVE-2025-64984
Kaspersky has fixed a security issue in Kaspersky Endpoint Security...
Medium 5.1
CVE-2024-1619
Kaspersky has fixed a security issue in the Kaspersky Security...
Medium 6.1
CVE-2024-13614
Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK...
Medium 5.3
CVE-2023-23349
Kaspersky has fixed a security issue in Kaspersky Password Manager...
Low 2.2
CVE-2020-35929
In TinyCheck before commits 9fd360d and ea53de8, the installation script...
Critical 9.8

Affected Vendor

Affected Software

TurboVNC
Vulnerable Versions:
commit prior to cea98166008301e614e0d36776bf9435a536136e

Timeline

Official Publish: October 29th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-121

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control
T1485 Data Destruction
Impact