SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2022:4330-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4330-1 advisory. - CVE-2020-29260: Fixed memory leakage via rfbClientCleanup bsc1203106. Tenable has extracted the preceding description block directly from...

OESA-2022-2090 libvncserver security update

libvncserver is a set of programs using the RFB Remote Frame Buffer protocol. They are designed to "export" a frame buffer via net: you set up a server and can connect to it via VNC viewers. If the server supports WebSockets which LibVNCServer does, you can also connect using an in-browser VNC...

MGASA-2022-0363 Updated libvncserver packages fix security vulnerability

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup. CVE-2020-29260...

CVE-2020-29260

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...

DEBIAN-CVE-2020-29260

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...

CVE-2020-29260

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...

Memory corruption

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...

CVE-2020-29260

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...

UBUNTU-CVE-2020-29260

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...

CVE-2020-29260

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...

CVE-2020-29260

CVE-2020-29260 affects libvncserver/libvncclient v0.9.13, with a memory leak in rfbClientCleanup() causing resource retention and potential memory exhaustion. The vulnerability is labeled with CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH, network attack, no privileges, no user in...

CVE-2020-29260

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...

CVE-2020-29260

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...

PT-2022-7505

Name of the Vulnerable Software and Affected Versions libvncclient version 0.9.13 Description The issue is related to a memory leak in the rfbClientCleanup function of the libvncclient component. This memory leak can be exploited by a remote attacker to cause a denial of service. Recommendations...

The vulnerability in the `libvncclient/sockets.c` component of the software for implementing VNC functions in LibVNCServer lies in buffer overflows in memory. This allows attackers to cause a service failure.

The vulnerability in the libvncclient/sockets.c component of the software used to implement VNC functions of LibVNCServer is related to buffer overflow in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

libvncserver: libvncclient/rfbproto.c does not limit TextChat size

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size...

Ubuntu 16.04 LTS : SSVNC vulnerabilities (USN-4547-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4547-2 advisory. It was discovered that the LibVNCClient vendored in SSVNC incorrectly handled certain packet lengths. A remote attacker could possibly use this issue to...

Ubuntu: Security Advisory (USN-4547-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4547-2: SSVNC vulnerabilities

It was discovered that the LibVNCClient vendored in SSVNC incorrectly handled certain packet lengths. A remote attacker could possibly use this issue to obtain sensitive information, cause a denial of service, or execute arbitrary code. CVE-2018-20020, CVE-2018-20021, CVE-2018-20022, CVE-2018-202...

USN-4547-2 ssvnc vulnerabilities

It was discovered that the LibVNCClient vendored in SSVNC incorrectly handled certain packet lengths. A remote attacker could possibly use this issue to obtain sensitive information, cause a denial of service, or execute arbitrary code. CVE-2018-20020, CVE-2018-20021, CVE-2018-20022, CVE-2018-202...