CVE-2019-17662

CVE-2019-17662 説明 ThinVNC 1.0b1 には任意のファイル読み取りの脆弱性があり、VNC サーバーの侵害につながります。この脆弱性は、VNC サーバーの導入時に認証が有効になっている場合でも存在します。認証用のパスワードは平文でファイルに保存されており、../../ThinVnc.ini ディレクトリトラバーサル攻撃ベクトルによって読み取ることができます。 NIST エクスプロイトのコンパイル方法 $ git clone https://github.com/whokilleddb/CVE-2019-17662 $ cd CVE-2019-17662 $ make...

CVE-2019-17662-Exploit

CVE-2019-17662 説明 ThinVNC 1.0b1 は任意のファイル読み取りに対して脆弱であり、VNCサーバーの侵害につながります。この脆弱性は、VNCサーバーの展開時に認証が有効になっている場合でも存在します。認証用パスワードは平文でファイルに保存されており、../../ThinVnc.ini ディレクトリトラバーサル攻撃ベクトルを介して読み取ることができます。 NIST 使用方法 $ ./bin/CVE-2019-17662 -h Usage: ./CVE-2019-17662 -u URL -f File Options: OPTIONS Desciption -u U...

AlmaLinux 9.2 [TuxCare] Security Update: qemu-guest-agent / qemu-img / qemu-kvm / qemu-kvm-audio-pa / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777042213)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777042213 advisory. - A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an...

CVE-2026-79680

A flaw was found in the Qt VNC Server module. A remote attacker, by using a specially modified VNC client that violates the Remote Framebuffer RFB protocol, can bypass the password authentication mechanism. This allows the attacker to gain unauthorized remote access to the shared application,...

CVE-2026-79680

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

CVE-2026-79680

The Qt VNC Server module contains an authentication bypass vulnerability within its password authentication mechanism. An attacker utilizing a specially modified VNC client that violates the RFB protocol can bypass password requirements to gain unauthorized remote access to the shared application...

CVE-2026-79680 Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

CVE-2026-79680 Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

EUVD-2026-85846

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

PT-2026-97783

Name of the Vulnerable Software and Affected Versions Qt VNC Server affected versions not specified Description An authentication bypass exists in the password authentication mechanism of the Qt VNC Server module. An attacker can use a modified VNC client that violates the RFB Remote Frame Buffer...

CVE-2026-79680: Authentication Bypass Using an Alternate Path or Channel

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2026:4024-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4024-1 advisory. This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting...

Astra Linux – Vulnerability in libvncserver

A divide by zero issue was detected in libvncserver-0.9.12. A malicious client could exploit this flaw to send a specially crafted message. When this message is processed by the VNC server, it will cause a floating-point exception, resulting in a denial of service...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QEMU’s built-in VNC server during the processing of ClientCutText messages. The qemuclipboardrequest function can be accessed before vncservercuttextcaps is called, which gives a malicious authenticated VNC client the opportunity to initialize the clipboard peer. This...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QEMU-built-in VNC server during the processing of ClientCutText messages. A incorrect exit condition may lead to an infinite loop when inflating a zlib buffer controlled by an attacker in the inflatebuffer function. This could allow a remotely authenticated client, wh...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QEMU-built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections exceeds a certain threshold. If it does, QEMU terminates the previous connection. However, if the previous connection is still in the handshake...

Security update for LibVNCServer (important)

openSUSE security update: security update for libvncserver ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21735-1 Rating: important References: bsc1276218 Cross-References: CVE-2026-50538 CVSS scores: CVE-2026-50538 SUSE : 8.8...

Security update for LibVNCServer

This update for LibVNCServer fixes the following issue: CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker- controlled data past the end of its framebuffer bsc1276218. Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2026:4024-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker- controlled data past the end of its framebuffer bsc1276218...

SUSE SLES15 Security Update : LibVNCServer (SUSE-SU-2026:3803-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3803-1 advisory. This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting libvncclie...