CVE-2020-14405: Allocation of Resources Without Limits or Throttling

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size...

CVE-2020-14398: Loop with Unreachable Exit Condition

An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c...

CVE-2018-21247: Missing Initialization of Resource

An issue was discovered in LibVNCServer before 0.9.13. There is an information leak of uninitialized memory contents in the libvncclient/rfbproto.c ConnectToRFBRepeater function...

CVE-2020-14402: Out-of-bounds Write

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings...

CVE-2020-14399: Undefined Security Weakness

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed...

CVE-2020-14400: Undefined Security Weakness

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary...

EulerOS 2.0 SP2 : libvncserver (EulerOS-SA-2020-1683)

According to the version of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large heigh...

CVE-2019-20839: Buffer Copy without Checking Size of Input

libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename...

PT-2020-2988 · Libvncserver +4 · Libvncserver +4

Name of the Vulnerable Software and Affected Versions: LibVNCServer versions prior to 0.9.13 Description: An issue in LibVNCServer is related to errors in the code, specifically in the libvncserver/translate.c component. The issue involves accessing byte-aligned data through uint16 t pointers. It...

CVE-2020-14403: Out-of-bounds Write

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings...

PT-2020-2990 · Libvnc +4 · Libvncserver +4

Name of the Vulnerable Software and Affected Versions: LibVNCServer versions prior to 0.9.13 Description: An issue was discovered in the libvncclient/rfbproto.c component of LibVNCServer, related to errors in the code. This issue allows a remote attacker to potentially cause a denial of service b...

Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2020-1683)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated vino packages fix security vulnerability

Updated vino packages fix security vulnerabilities: The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer did not properly handle attempts to send a large amount of ClientCutText data, which allowed remote attackers to cause a denial of service memory consumption ...

Arbitrary Code Execution

libvncserver is vulnerable to arbitrsary code execution. An integer overflow in HandleCursorShape results in heap-based buffer overflow allowing for arbitrary code execution...

openSUSE: Security Advisory for LibVNCServer (openSUSE-SU-2020:0624-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : LibVNCServer (openSUSE-2020-624)

This update for LibVNCServer fixes the following issues : - CVE-2019-15690: Fixed a heap buffer overflow bsc1160471. - CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory bsc1155419. - CVE-2019-20788: Fixed a integer overflow and heap-based buffe...

Security update for LibVNCServer (important)

openSUSE Security Update: Security update for LibVNCServer Announcement ID: openSUSE-SU-2020:0624-1 Rating: important References: 1155419 1160471 1170441 Cross-References: CVE-2019-15681 CVE-2019-15690 CVE-2019-20788 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities...

MGASA-2020-0207 Updated libvncserver packages fix security vulnerability

Updated libvncserver packages fix security vulnerability: libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value CVE-2019-20788...

Updated libvncserver packages fix security vulnerability

Updated libvncserver packages fix security vulnerability: libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value CVE-2019-20788...

OPENSUSE-SU-2020:0624-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issues: - CVE-2019-15690: Fixed a heap buffer overflow bsc1160471. - CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory bsc1155419. - CVE-2019-20788: Fixed a integer overflow and heap-based buffer...