79 matches found
CVE-2020-29260
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...
CVE-2020-29260
CVE-2020-29260 affects libvncserver/libvncclient v0.9.13, with a memory leak in rfbClientCleanup() causing resource retention and potential memory exhaustion. The vulnerability is labeled with CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH, network attack, no privileges, no user in...
CVE-2020-29260
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...
CVE-2020-29260
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup...
PT-2022-7505
Name of the Vulnerable Software and Affected Versions libvncclient version 0.9.13 Description The issue is related to a memory leak in the rfbClientCleanup function of the libvncclient component. This memory leak can be exploited by a remote attacker to cause a denial of service. Recommendations...
The vulnerability in the `libvncclient/sockets.c` component of the software for implementing VNC functions in LibVNCServer lies in buffer overflows in memory. This allows attackers to cause a service failure.
The vulnerability in the libvncclient/sockets.c component of the software used to implement VNC functions of LibVNCServer is related to buffer overflow in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
libvncserver: libvncclient/rfbproto.c does not limit TextChat size
An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size...
Ubuntu 16.04 LTS : SSVNC vulnerabilities (USN-4547-2)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4547-2 advisory. It was discovered that the LibVNCClient vendored in SSVNC incorrectly handled certain packet lengths. A remote attacker could possibly use this issue to...
Ubuntu: Security Advisory (USN-4547-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4547-2: SSVNC vulnerabilities
It was discovered that the LibVNCClient vendored in SSVNC incorrectly handled certain packet lengths. A remote attacker could possibly use this issue to obtain sensitive information, cause a denial of service, or execute arbitrary code. CVE-2018-20020, CVE-2018-20021, CVE-2018-20022, CVE-2018-202...
USN-4547-2 ssvnc vulnerabilities
It was discovered that the LibVNCClient vendored in SSVNC incorrectly handled certain packet lengths. A remote attacker could possibly use this issue to obtain sensitive information, cause a denial of service, or execute arbitrary code. CVE-2018-20020, CVE-2018-20021, CVE-2018-20022, CVE-2018-202...
USN-4547-1 italc vulnerabilities
It was discovered that an information disclosure vulnerability existed in the LibVNCServer vendored in iTALC when sending a ServerCutText message. An attacker could possibly use this issue to expose sensitive information. CVE-2019-15681 It was discovered that the LibVNCServer and LibVNCClient...
Ubuntu 18.04 LTS : iTALC vulnerabilities (USN-4547-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4547-1 advisory. It was discovered that an information disclosure vulnerability existed in the LibVNCServer vendored in iTALC when sending a ServerCutText message. An...
The vulnerability in the cross-platform library LibVNCServer’s component libvncclient/sockets.c allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability in the libvncclient/sockets.c component of the cross-platform library LibVNCServer relates to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code using a special...
The vulnerability in the cross-platform library LibVNCServer’s file libvncclient/rfbproto.c allows a attacker to cause a service failure.
The vulnerability of the libvncclient/rfbproto.c component of the cross-platform library LibVNCServer is related to errors in the code. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...
The vulnerability in the cross-platform library LibVNCServer’s component libvncclient/sockets.c allows a attacker to cause a service failure.
The vulnerability in the libvncclient/sockets.c component of the cross-platform library LibVNCServer relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure due to incorrect termination of the TCP...
Updated libvncserver packages fix security vulnerability
Updated libvncserver packages fix security vulnerabilities: libvncclient/sockets.c in LibVNCServer had a buffer overflow via a long socket filename CVE-2019-20839. libvncserver/rfbregion.c had a NULL pointer dereference CVE-2020-14397. Byte-aligned data was accessed through uint32t pointers in...
CVE-2019-20839
libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename...
Unspecified Vulnerability in LibVNCServer (CNVD-2020-36785)
LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in LibVNCServer versions prior to 0.9.13. The vulnerability can be exploited by an attacker to access byte-align...
LibVNCServer Buffer Overflow Vulnerability (CNVD-2020-36780)
LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A buffer overflow vulnerability exists in the libvncclient/sockets.c file in versions of LibVNCServer prior to 0.9.13. A remote attacker could...