[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRnvzLQBA9JI9Pn6kcBLs0e_QV1Oy8zGeoGxNWd5HJ7s":3,"g5a-risk:CVE-2019-15694":136},{"success":4,"data":5,"meta":134},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":53,"references":54,"referencesCount":75,"weaknesses":76,"weaknessesCount":53,"isActivelyExploited":90,"cisaInfo":26,"otxData":26,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":132,"notableEvents":133},"CVE-2019-15694","What is CVE-2019-15694?","TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs due to the signdness error in processing MemOutStream. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.","TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs due to ...","2019-12-26T15:15:11.337","2020-10-16T20:00:01.087",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","HIGH","NONE","UNCHANGED",null,1.2,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.04485,[40,40,40,40,40,40,40],"High",[44,48],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"tigervnc","*","cpe:2.3:a:tigervnc:tigervnc:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",2,[55,61,67,71],{"url":56,"source":57,"tags":58},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-01\u002Fmsg00039.html","Opensuse",[59,60],"Mailing List","Third Party Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fgithub.com\u002FCendioOssman\u002Ftigervnc\u002Fcommit\u002F0943c006c7d900dfc0281639e992791d6c567438","GitHub",[65,66,60],"Exploit","Patch",{"url":68,"source":63,"tags":69},"https:\u002F\u002Fgithub.com\u002FTigerVNC\u002Ftigervnc\u002Freleases\u002Ftag\u002Fv1.10.1",[70,60],"Release Notes",{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F12\u002F20\u002F2","Openwall",[65,59,60],4,[77,85],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":86,"name":87,"description":88,"extendedDescription":81,"status":82,"abstraction":89,"structure":84},"CWE-122","Heap-based Buffer Overflow","A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().","Variant",false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2019-15694? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-15694, a high severity cyber security vulnerability from 2019. TigerVNC version prior to 1.10.1 is vulnerable to heap buff...","CVE-2019-15694, CVE-2019-15694 vulnerability, CVE-2019-15694 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, tigervnc security, opensuse security, tigervnc vulnerability, leap vulnerability","\u002Fwhat-is\u002Fcve-2019-15694",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-15694","Cybersecurity","CVE-2019-15694, CVE-2019-15694 vulnerability, CVE-2019-15694 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118,126],{"Operator":26,"Negate":26,"Nodes":119},[120],{"Operator":121,"Negate":26,"CPEMatch":122},"OR",[123],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":125,"VersionEndIncluding":26},"5DB31840-DC35-40A5-8126-FF5FDD81EAD7","1.10.1",{"Operator":26,"Negate":26,"Nodes":127},[128],{"Operator":121,"Negate":26,"CPEMatch":129},[130],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":131,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",[],[],{"lastModified":11,"cacheTime":135,"version":32},1792266354771,{"score":137,"band":138,"action":139,"scoredAt":140},54,"Medium","Plan remediation","2026-10-16T06:47:33.657661+00:00"]