Red Hat Security AdvisoryRHSA-2020:0913
libvncserver security update
Released 2020-03-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libvncserver-0.9.9-14.el7_7
- Red Hat Enterprise Linux Client Optional (v. 7) libvncserver-devel-0.9.9-14.el7_7
- Red Hat Enterprise Linux Server (v. 7) libvncserver-0.9.9-14.el7_7
- Red Hat Enterprise Linux Server Optional (v. 7) libvncserver-devel-0.9.9-14.el7_7
- Red Hat Enterprise Linux Workstation (v. 7) libvncserver-0.9.9-14.el7_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libvncserver-devel-0.9.9-14.el7_7
Fixes 2 records
Priority MEDIUM 47
libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02497 · Published 2020-04-23 · Fixed CWE-190
Priority MEDIUM 41
LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00768 · Published 2025-01-24 · Partial fix CWE-122
