Priority HIGH 70
LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or appl…
Libvncserver Project
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Libvncserver Project records in CISA KEVNo Libvncserver Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records in Libvncserver · all components
Priority HIGH 67
LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a den…
TI-2018-05234 CVE-2018-7225 · GHSA-2v5x-9xhg-52hm
An issue was discovered in LibVNCServer through 0.9.11.
Priority MEDIUM 51
An issue was discovered in LibVNCServer through 0.9.11.
TI-2016-08054 CVE-2016-9942 · GHSA-wx7p-737c-9wqw
Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11…
Priority MEDIUM 49
Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdat…
TI-2016-08053 CVE-2016-9941 · GHSA-96f2-683j-mrm6
Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11…
Priority MEDIUM 48
Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUp…
TI-2017-14070 CVE-2017-18922 · GHSA-hq8f-cpqj-qph2
It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly…
Priority MEDIUM 46
It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames.
TI-2020-11267 CVE-2020-14400 · GHSA-36w6-3wpq-3xq2
An issue was discovered in LibVNCServer before 0.9.13.
Priority LOW 38
An issue was discovered in LibVNCServer before 0.9.13.
TI-2020-11266 CVE-2020-14399 · GHSA-qc2v-f6rf-7c3g
An issue was discovered in LibVNCServer before 0.9.13.
Priority LOW 38
An issue was discovered in LibVNCServer before 0.9.13.
TI-2010-05002 CVE-2010-5304 · GHSA-2wpx-v6qf-p32x
A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled…
Priority LOW 38
A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message.
TI-2020-15723 CVE-2020-25708 · GHSA-3xcq-6vjj-wqx7
A divide by zero issue was found to occur in libvncserver-0.9.12.
Priority LOW 36
A divide by zero issue was found to occur in libvncserver-0.9.12.
TI-2020-17623 CVE-2020-29260 · GHSA-mgvc-cjfr-fjf4
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
Priority LOW 35
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
TI-2020-11268 CVE-2020-14401 · GHSA-w447-c4rh-hwj6
An issue was discovered in LibVNCServer before 0.9.13.
Priority LOW 34
An issue was discovered in LibVNCServer before 0.9.13.