Red Hat Security AdvisoryRHSA-2020:0920
libvncserver security update
Released 2020-03-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) libvncserver-0.9.11-9.el8_1.2, libvncserver-devel-0.9.11-9.el8_1.2
- Red Hat Enterprise Linux AppStream (v. 8) libvncserver-0.9.11-9.el8_1.2
Fixes 2 records
Priority MEDIUM 47
libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02497 · Published 2020-04-23 · Fixed CWE-190
Priority MEDIUM 41
LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00768 · Published 2025-01-24 · Partial fix CWE-122
