Denial of Service Vulnerability in libvncserver

libvncserver is a cross-platform VNC code library, GNOME Remote Desktop, VirtualBox and many other applications use the library to implement VNC server-side functionality. A denial of service vulnerability exists in libvncserver, which can be exploited by an attacker to cause a denial of service...

CVE-2017-18922: Out-of-bounds Write

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow...

DLA-2264-1 libvncserver - security update

Bulletin has no description...

Information Disclosure

libvncserver.so is vulnerable to information disclosure. Uninitialized memory content in the ConnectToRFBRepeater function of libvncclient/rfbproto.c leads to a memory leak during connection to a repeater, potentially disclosing confidential information in memory...

CVE-2019-20840

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/wsdecode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode...

CVE-2019-20839

libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename...

CVE-2018-21247

An issue was discovered in LibVNCServer before 0.9.13. There is an information leak of uninitialized memory contents in the libvncclient/rfbproto.c ConnectToRFBRepeater function...

The vulnerability of the cross-platform library LibVNCServer, which stems from the inability to release resources after their useful period has ended, allows attackers to gain unauthorized access to information.

The vulnerability of the cross-platform library LibVNCServer is related to the failure to release resources after the expiration of their useful period. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in libvncclient/tlsopenssl.c when opening a SSL connection...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in libvncserver/rfbregion.c...

Denial Of Service (DoS)

libvncserver is vulnerable to denial of service DoS. The attack is possible because it allows unaligned access in the function hybiReadAndDecode in libvncserver/wsdecode.c...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of serviceDoS attack. The issue exists as an out-of-bounds access from the encoding function in libvncserver/sockets.c...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of service DoS attack. The issue exists as an out-of-bounds access can occur from the encoding function in libvncserver/hextile.c...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of serviceDoS attack. The issue exists as an out-of-bounds access from the encoding function in libvncserver/corre.c...

Unspecified Vulnerability in LibVNCServer (CNVD-2020-36785)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in LibVNCServer versions prior to 0.9.13. The vulnerability can be exploited by an attacker to access byte-align...

Unspecified Vulnerability in LibVNCServer (CNVD-2020-36786)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in LibVNCServer versions prior to 0.9.13. The vulnerability can be exploited by an attacker to access byte-align...

LibVNCServer Infinite Loop Vulnerability

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in the libvncclient/sockets.c file in versions of LibVNCServer prior to 0.9.13, which stems from a program faili...

LibVNCServer Input Validation Error Vulnerability

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. An input validation error vulnerability exists in the libvncserver/scale.c file in versions of LibVNCServer prior to 0.9.13. A remote attacker...

LibVNCServer Information Disclosure Vulnerability

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in the 'ConnectToRFBRepeater' function in the libvncclient/rfbproto.c file in versions of LibVNCServer prior to...

Unspecified Vulnerability in LibVNCServer

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in the libvncclient/rfbproto.c file in versions of LibVNCServer prior to 0.9.13, which stems from the program's...