SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2019:0060-1)

This update for LibVNCServer fixes the following issues : Security issues fixed : CVE-2018-15126: Fixed use-after-free in file transfer extension bsc1120114 CVE-2018-6307: Fixed use-after-free in file transfer extension server code bsc1120115 CVE-2018-20020: Fixed heap out-of-bound write inside...

SUSE-SU-2019:0060-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-15126: Fixed use-after-free in file transfer extension bsc1120114 - CVE-2018-6307: Fixed use-after-free in file transfer extension server code bsc1120115 - CVE-2018-20020: Fixed heap out-of-bound write insi...

PT-2019-1356

Name of the Vulnerable Software and Affected Versions LibVNC through 0.9.12 Description The issue is related to a heap out-of-bounds write vulnerability in the rfbserver.c component of the LibVNCServer library. This vulnerability can be exploited by a remote attacker to cause a denial of service...

Fedora 28 : libvncserver (2018-390001d1c7)

This release fixes a possible sensitive data leak and a memory exhaustion when handling ClientTextCut messages of the RFB protocol. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatical...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of serviceDoS attack. The malicious input can be input to Ultra decoding to cause a null pointer dereference in VNC client...

Information Disclosure Through Memory Leak

libvncserver.so is vulnerable to memory leak. The leak is due to improper initialization of string in the ConnectToRFBRepeater function, allowing to read stack memory...

Memory Leak

libvncserver.so is susceptible to memory leak. The attack exists because initialization of rfbClientCutTextMsg and rfbKeyEventMsg are not done properly ,allowing to read stack memory...

Out-of-bounds Write

libvncserver.so is vulnerable to out-of-bounds write. The vulnerability is possible because it does not properly validate the linesToRead to avoid infinite loop in the HandleRFBServerMessage function...

Remote Code Execution (RCE)

libvncserver.so is vulnerable to out-of-bounds write. The cause of the vulnerability is the improper memory allocation and handling for length variable in rfbProcessFileTransferReadBuffer function in libvncserver/rfbserver.c...

Remote Code Execution (RCE)

libvncserver.so is vulnerable to remote code execution. The vulnerability is possible because of the flaw in the server code of the file transfer extension, leading to heap use-after-free...

[SECURITY] [DLA 1617-1] libvncserver security update

Package : libvncserver Version : 0.9.9+dfsg2-6.1+deb8u4 CVE ID : CVE-2018-6307 CVE-2018-15127 CVE-2018-20019 CVE-2018-20020 CVE-2018-20021 CVE-2018-20022 CVE-2018-20023 CVE-2018-20024 Debian Bug : 916941 Kaspersky Lab discovered several vulnerabilities in libvncserver, a C library to implement VN...

Debian: Security Advisory (DLA-1617-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-1617-1 libvncserver - security update

Bulletin has no description...

The vulnerability of the rfbProcessClientNormalMessage() function in the cross-platform library LibVNCServer allows a hacker to trigger a service denial and gain unauthorized access to confidential data.

The vulnerability of the rfbProcessClientNormalMessage function in the cross-platform library LibVNCServer is related to insufficient cleaning of input data in VNC packets. Exploiting this vulnerability can allow an attacker to cause service failures and gain unauthorized access to confidential...

PT-2018-3545

Name of the Vulnerable Software and Affected Versions: LibVNCServer versions prior to 0.9.13 Description: The issue is related to the implementation of the ConnectToRFBRepeater function in the LibVNCServer library, which lacks protection of service data. This can lead to an information leak of...

EulerOS 2.0 SP3 : libvncserver (EulerOS-SA-2018-1176)

According to the version of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - LibVNCServer makes writing a VNC server or more correctly, a program exporting a framebuffer via the Remote Frame Buffer protocol easy.It hide...

Debian DSA-4221-1 : libvncserver - security update

Alexander Peslyak discovered that insufficient input sanitising of RFB packets in LibVNCServer could result in the disclosure of memory contents. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4221. The text...

[SECURITY] [DSA 4221-1] libvncserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4221-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 08, 2018 https://www.debian.org/security/faq -...

DSA-4221-1 libvncserver - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4221-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...