libvncserver security update

0.9.11-9.2 - Enable gating bug 1681199 0.9.11-9.1 - Fix CVE-2019-15690 an integer overflow in HandleCursorShape in a client bug 1814342...

DLA-2146-1 libvncserver - security update

Bulletin has no description...

Debian: Security Advisory (DLA-2146-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2146-1 : libvncserver security update

In libvncserver, through libvncclient/cursor.c, there is a possibility of a heap overflow, as reported by Pavel Cheremushkin. For Debian 8 'Jessie', this problem has been fixed in version 0.9.9+dfsg2-6.1+deb8u7. We recommend that you upgrade your libvncserver packages. NOTE: Tenable Network...

[SECURITY] [DLA 2146-1] libvncserver security update

Package : libvncserver Version : 0.9.9+dfsg2-6.1+deb8u7 CVE ID : CVE-2019-15690 Debian Bug : 954163 In libvncserver, through libvncclient/cursor.c, there is a possibility of a heap overflow, as reported by Pavel Cheremushkin. For Debian 8 "Jessie", this problem has been fixed in version...

CVE-2019-15690

A flaw was found in libvncserver. An integer overflow within the HandleCursorShape function can be exploited to cause a heap-based buffer overflow by tricking a user or application using libvncserver to connect to an unstrusted server and subsequently send cursor shapes with specially crafted...

LibVNC LibVNCServer Use After Free (CVE-2018-6307)

A use after free vulnerability exists in LibVNC LibVNCServer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

The vulnerability of the rfbproto.c component of the cross-platform library LibVNCServer, related to the occurrence of operations outside the buffer boundaries in memory, allows a perpetrator to trigger a service failure and gain unauthorized access to confidential data.

The vulnerability of the components in rfbproto.c of the cross-platform library LibVNCServer is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and gain unauthorized access to...

The vulnerability of the ultra.c component of the cross-platform library LibVNCServer, related to the occurrence of operations outside the buffer in memory, allows a perpetrator to trigger a service failure and gain unauthorized access to confidential data.

The vulnerability of the ultra.c component of the cross-platform library LibVNCServer is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and gain unauthorized access to confidential data...

The vulnerability of the HandleRFBServerMessage function in the cross-platform library LibVNCServer allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the HandleRFBServerMessage function in the cross-platform library LibVNCServer is related to an error in defining the full screen. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the MallocFrameBuffer function in the cross-platform library LibVNCServer allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MallocFrameBuffer function in the cross-platform library LibVNCServer is related to a display overflow error, which leads to a heap overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servi...

Null pointer dereference

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client...

CVE-2010-5304

CVE-2010-5304 is a NULL pointer dereference in LibVNCServer before 0.9.9 when processing certain ClientCutText messages, allowing a remote attacker to crash the VNC server by sending a crafted ClientCutText. Public references in SUSE and Fedora advisories show fixes in later packages (e.g., libvn...

CVE-2010-5304

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client...

CVE-2010-5304: NULL Pointer Dereference

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client...

Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2019-1033)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2018-1176)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2019-1068)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2018-1139)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2019-1051)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...