Lucene search
+L

10 matches found

SUSE CVE
SUSE CVE
•added 2026/07/21 1:13 p.m.•10 views

SUSE CVE-2026-41521

xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send crafted image dimensions that cause an integer overflow during memory buffer siz...

8.2CVSS7.9AI score0.00671EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/20 5:17 p.m.•20 views

CVE-2026-41521

xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send crafted image dimensions that cause an integer overflow during memory buffer siz...

9.1CVSS0.00671EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/20 4:41 p.m.•34 views

CVE-2026-41521

xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send crafted image dimensions that cause an integer overflow during memory buffer siz...

8.2CVSS7.9AI score0.00671EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/07/20 4:41 p.m.•13 views

EUVD-2026-46022

xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send crafted image dimensions that cause an integer overflow during memory buffer siz...

8.2CVSS7.9AI score0.00671EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/07/20 4:41 p.m.•39 views

CVE-2026-41521

xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send crafted image dimensions that cause an integer overflow during memory buffer siz...

9.1CVSS7.9AI score0.00671EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/09/18 12:00 a.m.•18 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling screen updates in a disabled state of the downstream interface, which could lead to a...

5.5CVSS5.8AI score0.0014EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2018/04/11 5:52 p.m.•12 views

QEMU: I/O: potential memory exhaustion via websock connection to VNC

A memory leakage issue was found in the I/O channels websockets implementation of the Quick Emulator QEMU. It could occur while sending screen updates to a client, which is slow to read and process them further. A privileged guest user could use this flaw to cause a denial of service on the host...

7.5CVSS7.1AI score0.04272EPSS
SaveExploits1References4
NVD
NVD
•added 2008/05/14 6:20 p.m.•22 views

CVE-2008-1944

Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer PVFB Message 3.0 through 3.0.3 allows local users to cause a denial of service SDL crash and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of message...

7.2CVSS7.3AI score0.00474EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/05/14 12:00 a.m.•5 views

CVE-2008-1944: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer PVFB Message 3.0 through 3.0.3 allows local users to cause a denial of service SDL crash and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of message...

7.2CVSS6.5AI score0.00474EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2008/05/13 12:28 p.m.•16 views

PVFB SDL backend chokes on bogus screen updates

Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer PVFB Message 3.0 through 3.0.3 allows local users to cause a denial of service SDL crash and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of message...

7.2CVSS6.2AI score0.00474EPSS
SaveExploits0References4
Rows per page
Query Builder