CVE-2019-20839

CVE-2019-20839 affects LibVNCServer: a buffer overflow in libvncclient/sockets.c can be triggered by a long socket filename, impacting versions prior to 0.9.13. The issue may enable remote code execution or crashes as implied by the buffer overflow vulnerability, with reports across distributions...

CVE-2019-15681

CVE-2019-15681 is a memory-leak vulnerability (CWE-655) in LibVNCServer’s VNC server component. The issue, introduced in LibVNC commit prior to d01e1bb4246..., could allow an attacker to read stack memory and cause information disclosure; when combined with another vulnerability this memory leaka...

CVE-2018-21247

CVE-2018-21247 : The vulnerability affects LibVNCServer prior to 0.9.13, with an information leak of uninitialized memory in the libvncclient/rfbproto.c ConnectToRFBRepeater function. The connected Nessus/Mirai-style advisories enumerate LibVNCServer in affected packages (e.g., libvncserver befor...

CVE-2020-14397

CVE-2020-14397 affects LibVNCServer prior to 0.9.13. The issue is a NULL pointer dereference in libvncserver/rfbregion.c, which can cause a crash and contribute to a denial of service. Public references in multiple advisories (e.g., MiracleLinux, Alibaba Cloud Linux, Red Hat and Rocky Linux conte...

CVE-2019-20840

CVE-2019-20840 concerns LibVNCServer prior to 0.9.13. The issue in libvncserver/ws_decode.c causes a crash from unaligned accesses in hybiReadAndDecode, with multiple advisories and patches documenting the fix in LibVNCServer-0.9.13+ (and related vendor advisories). The practical impact is crash/...

CVE-2020-14398

CVE-2020-14398 affects LibVNCServer before 0.9.13. An improperly closed TCP connection can cause an infinite loop in libvncclient/sockets.c. Several advisories (EulerOS, SUSE, Red Hat-related Nessus plugins) reference updates to LibVNCServer 0.9.13+ as the fix. Affected products include various L...

CVE-2018-20021

LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c0 contains a CWE-835: Infinite loop vulnerability in VNC client code (CVE-2018-20021). This flaw can let an attacker cause high resource consumption (CPU/RAM) via crafted VNC traffic. The issue is discussed across multiple Linux distrib...

CVE-2018-20024

CVE-2018-20024 is a null pointer dereference in LibVNCServer/LibVNCClient before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7, leading to denial of service via the VNC client code. The connected Nessus/Ubuntu/Mageia entries cite this CVE among LibVNC vulnerabilities, but no explicit public pat...

CVE-2018-20022

CVE-2018-20022 affects LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 in the VNC client code. The root cause is an improper initialization weakness (CWE-665) that allows an attacker to read stack memory, enabling information disclosure. When combined with another vulnerability, this can b...

CVE-2018-20023

CVE-2018-20023 affects LibVNCServer/LibVNCClient: CWE-665 Improper Initialization in the VNC Repeater client code can allow an attacker to read stack memory and disclose information. The issue is documented across multiple advisories (Debian/Ubuntu, Gentoo, Mageia, Red Hat) and is part of a broad...

CVE-2020-14396

LibVNCServer before 0.9.13 contains a NULL pointer dereference in libvncclient/tls_openssl.c (CVE-2020-14396). Affected: LibVNCServer library; issue documented across multiple sources (NVD OSV/OSV-DEBIAN/CNVD/Ubuntu USN). Impact notes in public advisories describe potential crash or instability; ...