libvncserver project libvncserver vulnerabilities and exploits

(subscribe to this query)

Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer prior to 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message containing a subrectangle outside of the clie...

Libvncserver Project Libvncserver

1 Article

Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer prior to 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message with the Ultra type tile, such that the LZO payl...

Libvncserver Project Libvncserver 0.9.10

1 Article

libvncclient v0.9.13 exists to contain a memory leak via the function rfbClientCleanup().

Libvncserver Project Libvncserver 0.9.13 Debian Debian Linux 10.0

A NULL pointer dereference flaw was found in the way LibVNCServer prior to 0.9.9 handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client.

Libvncserver Project Libvncserver Fedoraproject Fedora 19 Fedoraproject Fedora 20 Fedoraproject Fedora 21

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.

Libvncserver Project Libvncserver 0.9.12 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Debian Debian Linux 10.0

An issue exists in LibVNCServer prior to 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed.

Libvncserver Project Libvncserver Debian Debian Linux 8.0 Debian Debian Linux 9.0 Opensuse Leap 15.1 Opensuse Leap 15.2 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04

An issue exists in LibVNCServer prior to 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary

Libvncserver Project Libvncserver Debian Debian Linux 8.0 Debian Debian Linux 9.0 Opensuse Leap 15.1 Opensuse Leap 15.2 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04

An issue exists in LibVNCServer prior to 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.

Libvncserver Project Libvncserver Debian Debian Linux 8.0 Debian Debian Linux 9.0 Opensuse Leap 15.1 Opensuse Leap 15.2 Siemens Simatic Itc1500 Firmware Siemens Simatic Itc1500 Pro Firmware Siemens Simatic Itc1900 Firmware Siemens Simatic Itc1900 Pro Firmware Siemens Simatic Itc2200 Firmware Siemens Simatic Itc2200 Pro Firmware

It exists that websockets.c in LibVNCServer before 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.

Libvncserver Project Libvncserver Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04 Opensuse Leap 15.1 Opensuse Leap 15.2 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Siemens Simatic Itc1500 Firmware Siemens Simatic Itc1500 Pro Firmware Siemens Simatic Itc1900 Firmware

LibVNC prior to 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows malicious user to read stack memory and can be abuse for information disclosure. Combined with another vulnerability...

Libvnc Project Libvncserver Debian Debian Linux 8.0 Debian Debian Linux 9.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook