LibVNCServer File Write DoS

The vulnerability of the libvncclient/rfbproto.c component of the cross-platform library LibVNCServer is related to errors in the code. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...

Updated libvncserver packages fix security vulnerability

Updated libvncserver packages fix security vulnerabilities: libvncclient/sockets.c in LibVNCServer had a buffer overflow via a long socket filename CVE-2019-20839. libvncserver/rfbregion.c had a NULL pointer dereference CVE-2020-14397. Byte-aligned data was accessed through uint32t pointers in...

CVE-2019-20839

libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename...

Unspecified Vulnerability in LibVNCServer (CNVD-2020-36785)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in LibVNCServer versions prior to 0.9.13. The vulnerability can be exploited by an attacker to access byte-align...

LibVNCServer Buffer Overflow Vulnerability (CNVD-2020-36780)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A buffer overflow vulnerability exists in the libvncclient/sockets.c file in versions of LibVNCServer prior to 0.9.13. A remote attacker could...

DEBIAN-CVE-2020-14398

An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c...

UBUNTU-CVE-2020-14396

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tlsopenssl.c has a NULL pointer dereference...

CVE-2020-14396

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tlsopenssl.c has a NULL pointer dereference...

CVE-2020-14398

An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c...

CVE-2020-14405

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size...

CVE-2019-20839

libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename...

CVE-2019-20839

CVE-2019-20839 affects LibVNCServer: a buffer overflow in libvncclient/sockets.c can be triggered by a long socket filename, impacting versions prior to 0.9.13. The issue may enable remote code execution or crashes as implied by the buffer overflow vulnerability, with reports across distributions...

CVE-2020-14399: Undefined Security Weakness

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed...

PT-2020-6271

Name of the Vulnerable Software and Affected Versions LibVNCServer versions prior to 0.9.13 Description The issue is related to a buffer overflow in the libvncclient/sockets.c component of LibVNCServer. This buffer overflow can occur via a long socket filename. Exploitation of this issue may allo...

CVE-2020-14398: Loop with Unreachable Exit Condition

An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c...

Integer overflow

libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690...

Huawei EulerOS: Security Advisory for libvncsever (EulerOS-SA-2017-1130)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-15690

LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape function in libvncclient/cursor.c. An attacker sends cursor shapes with specially crafted dimensions, which can result in remote code execution...

PT-2019-5436

Name of the Vulnerable Software and Affected Versions LibVNCServer versions prior to 0.9.13 Description An issue in libvncclient/tls openssl.c of LibVNCServer is related to pointer dereference errors, which can lead to a denial of service. A remote attacker may exploit this issue to cause a servi...

PT-2019-5437

Name of the Vulnerable Software and Affected Versions LibVNCServer versions prior to 0.9.13 Description The issue is related to an infinite loop in the libvncclient/sockets.c component of the LibVNCServer library. This occurs due to an improperly closed TCP connection, which can be exploited by a...