CVE-2018-20750

LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete...

Denial Of Service (DoS)

libvncserver.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to the lack of size validation of msg.cct.legnth in the rfbProcessClientNormalMessage function of libvncserver/rfbserver.c, potentially causing a denial of service DoS attack...