CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

CVE-2019-20840

CVE-2019-20840 concerns LibVNCServer prior to 0.9.13. The issue in libvncserver/ws_decode.c causes a crash from unaligned accesses in hybiReadAndDecode, with multiple advisories and patches documenting the fix in LibVNCServer-0.9.13+ (and related vendor advisories). The practical impact is crash/...

CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

CVE-2018-21247

CVE-2018-21247 : The vulnerability affects LibVNCServer prior to 0.9.13, with an information leak of uninitialized memory in the libvncclient/rfbproto.c ConnectToRFBRepeater function. The connected Nessus/Mirai-style advisories enumerate LibVNCServer in affected packages (e.g., libvncserver befor...

CVE-2018-21247

An issue was discovered in LibVNCServer before 0.9.13. There is an information leak of uninitialized memory contents in the libvncclient/rfbproto.c ConnectToRFBRepeater function...

CVE-2018-21247

An issue was discovered in LibVNCServer before 0.9.13. There is an information leak of uninitialized memory contents in the libvncclient/rfbproto.c ConnectToRFBRepeater function...

CVE-2018-21247

An issue was discovered in LibVNCServer before 0.9.13. There is an information leak of uninitialized memory contents in the libvncclient/rfbproto.c ConnectToRFBRepeater function...

CVE-2020-14403: Out-of-bounds Write

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings...

CVE-2020-14398: Loop with Unreachable Exit Condition

An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c...

CVE-2020-14405: Allocation of Resources Without Limits or Throttling

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size...

CVE-2019-20840: Out-of-bounds Write

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

CVE-2020-14399: Undefined Security Weakness

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed...

PT-2020-2986

Name of the Vulnerable Software and Affected Versions LibVNCServer versions prior to 0.9.13 Description The issue is caused by an out-of-bounds access in the libvncserver/corre.c component of the LibVNCServer library. This can be exploited by a remote attacker to impact the confidentiality,...

PT-2020-10803

Name of the Vulnerable Software and Affected Versions LibVNCServer versions prior to 0.9.13 Description An issue in libvncserver/ws decode.c can lead to a crash due to unaligned accesses in the hybiReadAndDecode function. Recommendations For versions prior to 0.9.13, update to version 0.9.13 or...

PT-2020-2989

Name of the Vulnerable Software and Affected Versions LibVNCServer versions prior to 0.9.13 Description The issue is related to a NULL pointer dereference in the libvncserver/rfbregion.c component of the LibVNCServer library. This could potentially allow a remote attacker to cause a denial of...

PT-2020-6271

Name of the Vulnerable Software and Affected Versions LibVNCServer versions prior to 0.9.13 Description The issue is related to a buffer overflow in the libvncclient/sockets.c component of LibVNCServer. This buffer overflow can occur via a long socket filename. Exploitation of this issue may allo...

PT-2020-2987

Name of the Vulnerable Software and Affected Versions LibVNCServer versions prior to 0.9.13 Description The issue is caused by an integer overflow in the pixel value variable within the libvncserver/scale.c component of the LibVNCServer library. This could allow a remote attacker to impact the...

PT-2020-2988 · Libvncserver +4 · Libvncserver +4

Name of the Vulnerable Software and Affected Versions: LibVNCServer versions prior to 0.9.13 Description: An issue in LibVNCServer is related to errors in the code, specifically in the libvncserver/translate.c component. The issue involves accessing byte-aligned data through uint16 t pointers. It...