6 matches found
CVE-2020-25708
CVE-2020-25708 affects libvncserver (notably libvncserver-0.9.12). A divide-by-zero condition triggered by a malicious crafted message processed by a VNC server can cause a denial of service. Various Nessus-derived advisories reference this CVE among a set of LibVNCServer issues; the materials do...
CVE-2020-14399
CVE-2020-14399 affects LibVNCServer before 0.9.13. The issue is that Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c, enabling potential memory handling problems. Many OpenVAS/Nessus advisories reference this CVE among multiple LibVNCServer issues; the confirmed...
CVE-2020-14400
CVE-2020-14400 affects LibVNCServer up to version 0.9.12, where Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. Multiple security advisories (e.g., SUSE EulerOS/OpenVAS sources) list this CVE among a set of LibVNCServer issues and indicate fixes in newer relea...
CVE-2020-29260
CVE-2020-29260 affects libvncserver/libvncclient v0.9.13, with a memory leak in rfbClientCleanup() causing resource retention and potential memory exhaustion. The vulnerability is labeled with CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH, network attack, no privileges, no user in...
CVE-2010-5304
CVE-2010-5304 is a NULL pointer dereference in LibVNCServer before 0.9.9 when processing certain ClientCutText messages, allowing a remote attacker to crash the VNC server by sending a crafted ClientCutText. Public references in SUSE and Fedora advisories show fixes in later packages (e.g., libvn...