CVE-2018-20019

CVE-2018-20019 refers to LibVNC vulnerabilities where multiple heap out-of-bounds writes in the VNC client code can lead to remote code execution. Connected documents confirm an incomplete fix in the affected LibVNC components (e.g., “Incomplete fix for CVE-2018-20019”) and list LibVNCServer/LibV...

CVE-2019-20788

CVE-2019-20788 affects LibVNCServer (LibVNCClient) in libvncclient/cursor.c up to version 0.9.12, where HandleCursorShape can overflow an integer value and trigger a heap-based buffer overflow when a cursor shape with a large height or width is supplied. This corresponds to an impact on code hand...

CVE-2018-15127

LibVNCServer contains a heap out-of-bounds write vulnerability in the server code of the File Transfer extension, enabling remote code execution. Multiple connected advisories confirm CVE-2018-15127 and note affected versions (LibVNCServer prior to the patched release, e.g., 0.9.12 in some adviso...

CVE-2018-20749

LibVNC/libvncserver (vncserver) contains a heap out-of-bounds write in libvncserver/rfbserver.c. CVE-2018-20749 and CVE-2018-20750 reference heap-out-of-bounds writes with incomplete fixes related to CVE-2018-15127; advisories note that the fix for the earlier CVE was incomplete and Debian/ALAS e...

CVE-2018-20748

CVE-2018-20748 affects LibVNCServer/LibVNCClient prior to version 0.9.12, with multiple heap out-of-bounds writes in libvncclient/rfbproto.c. The vulnerability is described among a set where the fix for CVE-2018-20019 was incomplete. Several Nessus/RHEL advisories indicate unpatched status or unp...

CVE-2018-20750

CVE-2018-20750 : LibVNC up to 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The description notes that the fix for CVE-2018-15127 was incomplete, indicating an insufficiently addressed heap-write issue in the server component. Multiple advisories and lists ...

CVE-2018-15126

CVE-2018-15126 relates to LibVNCServer: heap use-after-free in the server code of the File Transfer extension, which can lead to remote code execution. The root cause is a heap-use-after-free in the file transfer path, enabling an attacker with network access to trigger code execution on a vulner...

CVE-2018-20020

CVE-2018-20020 refers to a heap out-of-bounds write in LibVNCServer/LibVNCClient within VNC client code. Public sources indicate the issue occurs in LibVNC before the commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d, which can lead to remote code execution. The CVE is listed in multiple vendor adv...