CVE-2017-18922

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow...

CVE-2017-18922

CVE-2017-18922 : LibVNCServer’s websockets.c (prior to 0.9.12) is affected; multiple advisories report that malformed WebSocket frames can trigger a heap-based buffer overflow. The connected Nessus entries confirm affected packages across various distros (e.g., MiracleLinux, Alibaba Cloud Linux, ...

[SECURITY] [DLA 2264-1] libvncserver security update

Package : libvncserver Version : 0.9.9+dfsg2-6.1+deb8u8 CVE ID : CVE-2019-20839 CVE-2020-14397 CVE-2020-14399 CVE-2020-14400 CVE-2020-14401 CVE-2020-14402 CVE-2020-14403 CVE-2020-14404 CVE-2020-14405 Debian Bug : Several vulnerabilities have been discovered in libVNC libvncserver Debian package, ...

CVE-2017-18922: Out-of-bounds Write

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow...

Denial of Service Vulnerability in libvncserver

libvncserver is a cross-platform VNC code library, GNOME Remote Desktop, VirtualBox and many other applications use the library to implement VNC server-side functionality. A denial of service vulnerability exists in libvncserver, which can be exploited by an attacker to cause a denial of service...

DLA-2264-1 libvncserver - security update

Bulletin has no description...

Information Disclosure

libvncserver.so is vulnerable to information disclosure. Uninitialized memory content in the ConnectToRFBRepeater function of libvncclient/rfbproto.c leads to a memory leak during connection to a repeater, potentially disclosing confidential information in memory...

CVE-2019-20839

libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename...

CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

CVE-2018-21247

An issue was discovered in LibVNCServer before 0.9.13. There is an information leak of uninitialized memory contents in the libvncclient/rfbproto.c ConnectToRFBRepeater function...

The vulnerability of the cross-platform library LibVNCServer, which stems from the inability to release resources after their useful period has ended, allows attackers to gain unauthorized access to information.

The vulnerability of the cross-platform library LibVNCServer is related to the failure to release resources after the expiration of their useful period. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in libvncclient/tlsopenssl.c when opening a SSL connection...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in libvncserver/rfbregion.c...

Denial Of Service (DoS)

libvncserver is vulnerable to denial of service DoS. The attack is possible because it allows unaligned access in the function hybiReadAndDecode in libvncserver/wsdecode.c...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of serviceDoS attack. The issue exists as an out-of-bounds access from the encoding function in libvncserver/sockets.c...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of service DoS attack. The issue exists as an out-of-bounds access can occur from the encoding function in libvncserver/hextile.c...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of serviceDoS attack. The issue exists as an out-of-bounds access from the encoding function in libvncserver/corre.c...

Unspecified Vulnerability in LibVNCServer

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in the libvncclient/rfbproto.c file in versions of LibVNCServer prior to 0.9.13, which stems from the program's...

LibVNCServer Buffer Overflow Vulnerability

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A buffer overflow vulnerability exists in the libvncserver/rre.c file in versions of LibVNCServer prior to 0.9.13. A remote attacker could explo...

LibVNCServer Buffer Overflow Vulnerability (CNVD-2020-36789)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A buffer overflow vulnerability exists in the libvncserver/hextile.c file in versions of LibVNCServer prior to 0.9.13. A remote attacker could...