Red Hat Security AdvisoryRHSA-2021:1811
libvncserver security update
Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) libvncserver-devel-0.9.11-17.el8
- Red Hat Enterprise Linux AppStream (v. 8) libvncserver-0.9.11-17.el8
Fixes 5 records
Priority LOW 39
An issue was discovered in LibVNCServer before 0.9.13.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0339 · Published 2020-06-17 · Partial fix CWE-476
Priority LOW 39
libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03589 · Published 2020-06-17 · Partial fix CWE-120
Priority LOW 38
An issue was discovered in LibVNCServer before 0.9.13.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02516 · Published 2020-06-17 · Partial fix CWE-909
Priority LOW 36
A divide by zero issue was found to occur in libvncserver-0.9.12.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01633 · Published 2020-11-27 · Partial fix CWE-369
Priority LOW 33
An issue was discovered in LibVNCServer before 0.9.13.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01906 · Published 2020-06-17 · Partial fix CWE-770