[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGzFLzsGsQOg8XMiVN6Fijq0XZtIa-yIHSFuC49SggRo":3,"g5a-risk:CVE-2019-15691":138},{"success":4,"data":5,"meta":136},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":53,"references":54,"referencesCount":75,"weaknesses":76,"weaknessesCount":53,"isActivelyExploited":92,"cisaInfo":26,"otxData":26,"relatedBlogPosts":93,"seoMetadata":94,"configurations":119,"relatedVendorCves":134,"notableEvents":135},"CVE-2019-15691","What is CVE-2019-15691?","TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack unwinding. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.","TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding rou...","2019-12-26T15:15:11.007","2022-11-09T21:25:17.463",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","HIGH","NONE","UNCHANGED",null,1.2,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.04719,[40,40,40,40,40,40,40],"High",[44,48],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"tigervnc","*","cpe:2.3:a:tigervnc:tigervnc:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",2,[55,60,65,69],{"url":56,"source":57,"tags":58},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-01\u002Fmsg00039.html","Opensuse",[59],"Third Party Advisory",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fgithub.com\u002FCendioOssman\u002Ftigervnc\u002Fcommit\u002Fd61a767d6842b530ffb532ddd5a3d233119aad40","GitHub",[64,59],"Patch",{"url":66,"source":62,"tags":67},"https:\u002F\u002Fgithub.com\u002FTigerVNC\u002Ftigervnc\u002Freleases\u002Ftag\u002Fv1.10.1",[68,59],"Release Notes",{"url":70,"source":71,"tags":72},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F12\u002F20\u002F2","Openwall",[73,74,59],"Exploit","Mailing List",4,[77,85],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-672","Operation on a Resource after Expiration or Release","The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.","","Draft","Class","Simple",{"id":86,"name":87,"description":88,"extendedDescription":89,"status":90,"abstraction":91,"structure":84},"CWE-825","Expired Pointer Dereference","The product dereferences a pointer that contains a location for memory that was previously valid, but is no longer valid.","When a product releases memory, but it maintains a pointer to that memory, then the memory might be re-allocated at a later time. If the original pointer is accessed to read or write data, then this could cause the product to read or modify data that is in use by a different function or process. Depending on how the newly-allocated memory is used, this could lead to a denial of service, information exposure, or code execution.","Incomplete","Base",false,[],{"title":95,"metaDescription":96,"keywords":97,"canonicalUrl":98,"structuredData":99},"What is CVE-2019-15691? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-15691, a high severity cyber security vulnerability from 2019. TigerVNC version prior to 1.10.1 is vulnerable to stack use...","CVE-2019-15691, CVE-2019-15691 vulnerability, CVE-2019-15691 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, tigervnc security, opensuse security, tigervnc vulnerability, leap vulnerability","\u002Fwhat-is\u002Fcve-2019-15691",{"@context":100,"@type":101,"headline":95,"description":96,"datePublished":10,"dateModified":11,"author":102,"publisher":106,"about":110,"mainEntityOfPage":114,"articleSection":117,"keywords":118},"https:\u002F\u002Fschema.org","TechArticle",{"@type":103,"name":104,"url":105},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":103,"name":104,"url":105,"logo":107},{"@type":108,"url":109},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":111,"name":6,"description":112,"additionalType":113},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":115,"@id":116},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-15691","Cybersecurity","CVE-2019-15691, CVE-2019-15691 vulnerability, CVE-2019-15691 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[120,128],{"Operator":26,"Negate":26,"Nodes":121},[122],{"Operator":123,"Negate":26,"CPEMatch":124},"OR",[125],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":126,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":127,"VersionEndIncluding":26},"5DB31840-DC35-40A5-8126-FF5FDD81EAD7","1.10.1",{"Operator":26,"Negate":26,"Nodes":129},[130],{"Operator":123,"Negate":26,"CPEMatch":131},[132],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",[],[],{"lastModified":11,"cacheTime":137,"version":32},1792266354809,{"score":139,"band":140,"action":141,"scoredAt":142},54,"Medium","Plan remediation","2026-10-16T06:47:33.656726+00:00"]