Denial Of Service (DoS) Through Integer Overflow

libvncserver.so is vulnerable to denial of service DoS attacks. The vulnerability exists in the vcSetXCutTextProc function of VNConsole.c where there the improper sanitization of the client-specified message length could cause a denial of service DoS thorugh an integer overflow issue when...

CVE-2018-7226

An issue was discovered in vcSetXCutTextProc in VNConsole.c in LinuxVNC and VNCommand from the LibVNC/vncterm distribution through 0.9.10. Missing sanitization of the client-specified message length may cause integer overflow or possibly have unspecified other impact via a specially crafted VNC...

PT-2018-17959

Name of the Vulnerable Software and Affected Versions LibVNC/vncterm versions through 0.9.10 Description An issue was discovered in the vcSetXCutTextProc function in VNConsole.c, potentially causing integer overflow or unspecified other impact due to missing sanitization of the client-specified...