Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of service DoS. The vulnerability exists through accessing byte-aligned data through uint16t pointers in libvncserver/translate.c, causing an application crash...

The vulnerability of the component libvncclient/rfbproto.c in the cross-platform library LibVNCServer allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the cross-platform library LibVNCServer, located in the component libvncclient/rfbproto.c, involves the allocation of unlimited memory when accessing TextChat. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the `libvncserver/rre.c` component of the cross-platform library LibVNCServer allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libvncserver/rre.c component of the cross-platform library LibVNCServer arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

The vulnerability in the cross-platform library LibVNCServer’s component libvncserver/rfbregion.c allows a attacker to cause a service failure.

The vulnerability in the cross-platform library LibVNCServer, located in the component libvncserver/rfbregion.c, is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the component libvncserver/corre.c in the cross-platform library LibVNCServer allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the component libvncserver/corre.c in the cross-platform library LibVNCServer arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of the component libvncclient/tls_openssl.c in the cross-platform library LibVNCServer allows a attacker to cause a service failure.

The vulnerability in the cross-platform library LibVNCServer, specifically in the file libvncclient/tlsopenssl.c, is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability in the cross-platform library LibVNCServer’s file libvncclient/rfbproto.c allows a attacker to cause a service failure.

The vulnerability of the libvncclient/rfbproto.c component of the cross-platform library LibVNCServer is related to errors in the code. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...

The vulnerability in the `libvncserver/translate.c` component of the cross-platform library LibVNCServer allows a attacker to cause a service failure.

The vulnerability of the libvncserver/translate.c component within the cross-platform library LibVNCServer is related to errors in the code. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...

The vulnerability in the cross-platform library LibVNCServer’s component libvncclient/sockets.c allows a attacker to cause a service failure.

The vulnerability in the libvncclient/sockets.c component of the cross-platform library LibVNCServer relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure due to incorrect termination of the TCP...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : LibVNCServer vulnerabilities (USN-4407-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4407-1 advisory. It was discovered that LibVNCServer incorrectly handled decompressing data. An attacker could possibly use this issue to cause...

MGASA-2020-0280 Updated libvncserver packages fix security vulnerability

Updated libvncserver packages fix security vulnerabilities: libvncclient/sockets.c in LibVNCServer had a buffer overflow via a long socket filename CVE-2019-20839. libvncserver/rfbregion.c had a NULL pointer dereference CVE-2020-14397. Byte-aligned data was accessed through uint32t pointers in...

Updated libvncserver packages fix security vulnerability

Updated libvncserver packages fix security vulnerabilities: libvncclient/sockets.c in LibVNCServer had a buffer overflow via a long socket filename CVE-2019-20839. libvncserver/rfbregion.c had a NULL pointer dereference CVE-2020-14397. Byte-aligned data was accessed through uint32t pointers in...

Ubuntu: Security Advisory (USN-4407-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4407-1 libvncserver vulnerabilities

It was discovered that LibVNCServer incorrectly handled decompressing data. An attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service. CVE-2019-15680 It was discovered that an information disclosure vulnerability existed in LibVNCServer when sendin...

USN-4407-1: LibVNCServer vulnerabilities

It was discovered that LibVNCServer incorrectly handled decompressing data. An attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service. CVE-2019-15680 It was discovered that an information disclosure vulnerability existed in LibVNCServer when sendin...

LibVNCServer Buffer Overflow Vulnerability (CNVD-2020-36778)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in a program. A buffer overflow vulnerability exists in the websockets.c file in versions of LibVNCServer prior to 9.12. The vulnerability stems from a web...

Debian: Security Advisory (DLA-2264-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-18922

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow...

DEBIAN-CVE-2017-18922

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow...

CVE-2017-18922

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow...