PT-2020-6265 · Unknown +9 · Libvncserver +9

Name of the Vulnerable Software and Affected Versions: LibVNCServer version 0.9.12 Description: The issue is related to a divide by zero problem in LibVNCServer, which can be exploited by a remote attacker to cause a denial of service. A malicious client can send a specially crafted message to th...

The vulnerability of the implementation of the ConnectToRFBRepeater function in the cross-platform library LibVNCServer allows a hacker to cause a service failure.

The vulnerability of the ConnectToRFBRepeater function implementation in the cross-platform library LibVNCServer is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of service DoS attack. The issue exists as an out-of-bounds access can occur from the encoding function in libvncserver/hextile.c...

CVE-2020-14399

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed...

CVE-2020-14400

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary...

Information Disclosure

libvncserver.so is vulnerable to information disclosure. A memory leak in the rfbSendServerCutText function in rfbserver.c allows for an attacker to read stack memory which can be used to bypass ASLR...

The vulnerability of the rfbserver.c component of the cross-platform library LibVNCServer, related to writing beyond buffer boundaries in memory, allows a perpetrator to cause a service failure and gain unauthorized access to confidential data.

The vulnerability of the rfbserver.c component of the cross-platform library LibVNCServer is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and gain unauthorized access to confidential data...

Remote Code Execution (RCE)

LibVNCserver.so is vulnerable to remote code execution. A heap out-of-bounds write vulnerability in libvncserver/rfbserver.c allows for a remote attacker to execute arbitrary code on the system...

Remote Code Execution (RCE)

libvncserver.so is vulnerable to remote code execution. The vulnerability is possible because of the flaw in the server code of the file transfer extension, leading to heap use-after-free...

UBUNTU-CVE-2016-9942

Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service application crash or possibly execute arbitrary code via a crafted FramebufferUpdate message with the Ultra type tile, such that the LZO payload decompressed leng...

CVE-2014-6052

The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to cause a denial of service application crash or possibly execute arbitrary code by specifying a large screen size in a 1...

CVE-2014-6054

The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service divide-by-zero error and server crash via a zero value in the scaling factor in a 1 PalmVNCSetScaleFactor or 2 SetScale message...