Lucene search
+L

2167 matches found

NVD
NVD
added 2020/03/05 7:15 p.m.27 views

CVE-2019-20382

QEMU 4.1.0 has a memory leak in zrlecompressdata in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd...

3.5CVSS5.1AI score0.00866EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2020/03/05 7:15 p.m.54 views

CVE-2019-20382

QEMU 4.1.0 has a memory leak in zrlecompressdata in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd...

3.5CVSS6.8AI score0.00866EPSS
SaveExploits0References4
Prion
Prion
added 2020/03/05 7:15 p.m.34 views

Design/Logic Flaw

QEMU 4.1.0 has a memory leak in zrlecompressdata in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd...

2.7CVSS4.3AI score0.00866EPSS
SaveExploits0References6Affected Software4
Cvelist
Cvelist
added 2020/03/05 6:27 p.m.36 views

CVE-2019-20382

QEMU 4.1.0 has a memory leak in zrlecompressdata in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd...

5.2AI score0.00866EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2020/03/05 6:27 p.m.46 views

CVE-2019-20382

QEMU 4.1.0 has a memory leak in zrlecompressdata in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd...

3.5CVSS5.8AI score0.00866EPSS
SaveExploits0
CVE
CVE
added 2020/03/05 6:27 p.m.379 views

CVE-2019-20382

Summary of CVE-2019-20382 (mode C) QEMU 4.1.0 is affected by a memory leak in zrle_compress_data (ui/vnc-enc-zrle.c) during a VNC disconnect. The leak is due to incorrect use of libz, where memory allocated in deflateInit2 may not be freed by deflateEnd. This leads to a leak of allocated memory o...

3.5CVSS4.8AI score0.00866EPSS
SaveExploits0References6Affected Software1
Check Point Advisories
Check Point Advisories
added 2020/03/01 12:00 a.m.23 views

UltraVNC VNC Server Heap-based Buffer Overflow (CVE-2019-8274)

A buffer overflow vulnerability exists in UltraVNC VNC Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

7.5CVSS9.6AI score0.08263EPSS
SaveExploits0
NVD
NVD
added 2020/02/05 8:15 p.m.23 views

CVE-2010-5304

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client...

7.5CVSS7.4AI score0.03115EPSS
SaveExploits0References6
Prion
Prion
added 2020/02/05 8:15 p.m.22 views

Null pointer dereference

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client...

5CVSS6.9AI score0.03115EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
added 2020/02/05 7:35 p.m.48 views

CVE-2010-5304

A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client...

7.3AI score0.03115EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2020/02/01 3:54 p.m.32 views

CVE-2018-5683

An out-of-bounds read access issue was found in the VGA emulator of QEMU. It could occur in vgadrawtext routine, while updating display area for a vnc client. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS...

6CVSS2.1AI score0.00683EPSS
SaveExploits1References1
NVD
NVD
added 2020/01/23 8:15 p.m.30 views

CVE-2015-5239

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service process crash via a CLIENTCUTTEXT message, which triggers an infinite loop...

6.5CVSS6.3AI score0.0361EPSS
SaveExploits1References10
OSV
OSV
added 2020/01/23 8:15 p.m.7 views

DEBIAN-CVE-2015-5239

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service process crash via a CLIENTCUTTEXT message, which triggers an infinite loop...

6.5CVSS7AI score0.0361EPSS
SaveExploits1References1
OSV
OSV
added 2020/01/23 8:15 p.m.10 views

CVE-2015-5239

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service process crash via a CLIENTCUTTEXT message, which triggers an infinite loop...

6.5CVSS6.5AI score
SaveExploits0References20
Prion
Prion
added 2020/01/23 8:15 p.m.27 views

Integer overflow

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service process crash via a CLIENTCUTTEXT message, which triggers an infinite loop...

4CVSS6.7AI score0.0361EPSS
SaveExploits1References10Affected Software8
CVE
CVE
added 2020/01/23 7:52 p.m.139 views

CVE-2015-5239

CVE-2015-5239 : QEMU’s VNC display driver is vulnerable to an integer overflow in the vnc_client_read()/protocol_client_msg() paths when processing a CLIENT_CUT_TEXT message, which can cause an infinite loop and crash the QEMU process. Affected products include QEMU with the VNC display driver pr...

6.5CVSS6.4AI score0.0361EPSS
SaveExploits1References10Affected Software1
Debian CVE
Debian CVE
added 2020/01/23 7:52 p.m.56 views

CVE-2015-5239

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service process crash via a CLIENTCUTTEXT message, which triggers an infinite loop...

6.5CVSS7.2AI score0.0361EPSS
SaveExploits1
Cvelist
Cvelist
added 2020/01/23 7:52 p.m.35 views

CVE-2015-5239

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service process crash via a CLIENTCUTTEXT message, which triggers an infinite loop...

6.6AI score0.0361EPSS
SaveExploits1References10
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for gtk-vnc (EulerOS-SA-2017-1182)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.04309EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.29 views

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2017-1080)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.9CVSS8.3AI score0.03936EPSS
SaveExploits0References2
Rows per page
Query Builder