CVE-2020-14402

CVE-2020-14402 affects the LibVNCServer project, specifically the libvncserver/corre.c code path, where an out-of-bounds access is possible via encodings. The public description, and multiple connected advisories/plugins, consistently reference this issue as present in LibVNCServer before version...

CVE-2020-14403

Vulnerability CVE-2020-14403 affects LibVNCServer prior to 0.9.13. The issue is in libvncserver/hextile.c and allows out-of-bounds access via encodings. No exploitation details are provided in the sources beyond this description. Mitigation is to upgrade LibVNCServer to 0.9.13 or later (or apply ...

CVE-2020-14404

CVE-2020-14404 affects LibVNCServer before version 0.9.13, with the root cause being out-of-bounds access in the rre.c encodings path. Affected component: libvncserver (server-side handling of Encodings). Impact as stated: potential information disclosure or denial of service with low confidentia...