Important: Red Hat Security Advisory: libvncserver security update

An update for libvncserver is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Denial Of Service (DoS)

libvncserver is vulnerable to denial of service DoS attacks. The vulnerability exists as an integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service crash and possibly execute arbitrary code via an...

libvncserver security update

0.9.9-13 - Fix CVE-2018-15127 Heap out-of-bounds write in rfbserver.c:rfbProcessFileTransferReadBuffer bug 1662995...

SUSE SLES11 Security Update : LibVNCServer (SUSE-SU-2019:13927-1)

This update for LibVNCServer fixes the following issues : Security issues fixed : CVE-2018-15126: Fixed use-after-free in file transfer extension bsc1120114 CVE-2018-6307: Fixed use-after-free in file transfer extension server code bsc1120115 CVE-2018-20020: Fixed heap out-of-bound write inside...

openSUSE Security Update : LibVNCServer (openSUSE-2019-45)

This update for LibVNCServer fixes the following issues : Security issues fixed : - CVE-2018-15126: Fixed use-after-free in file transfer extension bsc1120114 - CVE-2018-6307: Fixed use-after-free in file transfer extension server code bsc1120115 - CVE-2018-20020: Fixed heap out-of-bound write...

SUSE SLED15 / SLES15 Security Update : LibVNCServer (SUSE-SU-2019:0080-1)

This update for LibVNCServer fixes the following issues : Security issues fixed : CVE-2018-15126: Fixed use-after-free in file transfer extension bsc1120114 CVE-2018-6307: Fixed use-after-free in file transfer extension server code bsc1120115 CVE-2018-20020: Fixed heap out-of-bound write inside...

Security update for LibVNCServer (important)

openSUSE Security Update: Security update for LibVNCServer Announcement ID: openSUSE-SU-2019:0045-1 Rating: important References: 1120114 1120115 1120116 1120117 1120118 1120119 1120120 1120121 1120122 Cross-References: CVE-2018-15126 CVE-2018-15127 CVE-2018-20019 CVE-2018-20020 CVE-2018-20021...

openSUSE: Security Advisory for LibVNCServer (openSUSE-SU-2019:0045-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2019:0080-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-15126: Fixed use-after-free in file transfer extension bsc1120114 - CVE-2018-6307: Fixed use-after-free in file transfer extension server code bsc1120115 - CVE-2018-20020: Fixed heap out-of-bound write insi...

SUSE-SU-2019:13927-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-15126: Fixed use-after-free in file transfer extension bsc1120114 - CVE-2018-6307: Fixed use-after-free in file transfer extension server code bsc1120115 - CVE-2018-20020: Fixed heap out-of-bound write insi...

SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2019:0060-1)

This update for LibVNCServer fixes the following issues : Security issues fixed : CVE-2018-15126: Fixed use-after-free in file transfer extension bsc1120114 CVE-2018-6307: Fixed use-after-free in file transfer extension server code bsc1120115 CVE-2018-20020: Fixed heap out-of-bound write inside...

SUSE-SU-2019:0060-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-15126: Fixed use-after-free in file transfer extension bsc1120114 - CVE-2018-6307: Fixed use-after-free in file transfer extension server code bsc1120115 - CVE-2018-20020: Fixed heap out-of-bound write insi...

Fedora 28 : libvncserver (2018-390001d1c7)

This release fixes a possible sensitive data leak and a memory exhaustion when handling ClientTextCut messages of the RFB protocol. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatical...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of serviceDoS attack. The malicious input can be input to Ultra decoding to cause a null pointer dereference in VNC client...

Information Disclosure Through Memory Leak

libvncserver.so is vulnerable to memory leak. The leak is due to improper initialization of string in the ConnectToRFBRepeater function, allowing to read stack memory...

Memory Leak

libvncserver.so is susceptible to memory leak. The attack exists because initialization of rfbClientCutTextMsg and rfbKeyEventMsg are not done properly ,allowing to read stack memory...

Out-of-bounds Write

libvncserver.so is vulnerable to out-of-bounds write. The vulnerability is possible because it does not properly validate the linesToRead to avoid infinite loop in the HandleRFBServerMessage function...

Remote Code Execution (RCE)

libvncserver.so is vulnerable to out-of-bounds write. The cause of the vulnerability is the improper memory allocation and handling for length variable in rfbProcessFileTransferReadBuffer function in libvncserver/rfbserver.c...

Remote Code Execution (RCE)

libvncserver.so is vulnerable to remote code execution. The vulnerability is possible because of the flaw in the server code of the file transfer extension, leading to heap use-after-free...

[SECURITY] [DLA 1617-1] libvncserver security update

Package : libvncserver Version : 0.9.9+dfsg2-6.1+deb8u4 CVE ID : CVE-2018-6307 CVE-2018-15127 CVE-2018-20019 CVE-2018-20020 CVE-2018-20021 CVE-2018-20022 CVE-2018-20023 CVE-2018-20024 Debian Bug : 916941 Kaspersky Lab discovered several vulnerabilities in libvncserver, a C library to implement VN...