Divide By Zero The advisory has been revoked - it doesn't affect any version of package vino-debugsource  (opens in a new tab)


Threat Intelligence

EPSS
1.63% (75th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL8-VINODEBUGSOURCE-2866915
  • published26 Jul 2021
  • disclosed13 May 2020

Introduced: 13 May 2020

CVE-2020-25708  (opens in a new tab)
CWE-369  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream vino-debugsource package and not the vino-debugsource package as distributed by RHEL.

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.