Denial Of Service (DoS) Through Integer Overflow

libvncserver.so is vulnerable to denial of service DoS attacks. The vulnerability exists in the vcSetXCutTextProc function of VNConsole.c where there the improper sanitization of the client-specified message length could cause a denial of service DoS thorugh an integer overflow issue when...

Integer overflow

An issue was discovered in vcSetXCutTextProc in VNConsole.c in LinuxVNC and VNCommand from the LibVNC/vncterm distribution through 0.9.10. Missing sanitization of the client-specified message length may cause integer overflow or possibly have unspecified other impact via a specially crafted VNC...

CVE-2018-7226

An issue was discovered in vcSetXCutTextProc in VNConsole.c in LinuxVNC and VNCommand from the LibVNC/vncterm distribution through 0.9.10. Missing sanitization of the client-specified message length may cause integer overflow or possibly have unspecified other impact via a specially crafted VNC...

CVE-2018-7226

An issue was discovered in vcSetXCutTextProc in VNConsole.c in LinuxVNC and VNCommand from the LibVNC/vncterm distribution through 0.9.10. Missing sanitization of the client-specified message length may cause integer overflow or possibly have unspecified other impact via a specially crafted VNC...

CVE-2018-7226

CVE-2018-7226 affects LibVNC/vncterm (LinuxVNC) up to version 0.9.10. The issue is in vcSetXCutTextProc() of VNConsole.c where unsanitized client message length may cause an integer overflow, potentially leading to unspecified impact via a crafted VNC packet. Public documents consistently referen...

CVE-2018-7226

Removed by vendor...