← All advisories

High severity7.5NVD Advisory· Published Sep 2, 2022· Updated Jun 17, 2026

CVE-2020-29260

CVE-2020-29260

Description

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11

libvncclient/libvncclientdescription
Libvncserver/libvncclientllm-fuzzy
Range: <=0.9.13
osv-coords9 versions
pkg:rpm/opensuse/LibVNCServer&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/LibVNCServer&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/LibVNCServer&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP3 pkg:rpm/suse/LibVNCServer&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4 pkg:rpm/suse/LibVNCServer&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/LibVNCServer&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/LibVNCServer&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/LibVNCServer&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP3 pkg:rpm/suse/LibVNCServer&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP4
< 0.9.10-150000.4.29.1+ 8 more
- (no CPE)range: < 0.9.10-150000.4.29.1
- (no CPE)range: < 0.9.13-150400.3.3.1
- (no CPE)range: < 0.9.10-150000.4.29.1
- (no CPE)range: < 0.9.13-150400.3.3.1
- (no CPE)range: < 0.9.9-17.41.1
- (no CPE)range: < 0.9.9-17.41.1
- (no CPE)range: < 0.9.9-17.41.1
- (no CPE)range: < 0.9.10-150000.4.29.1
- (no CPE)range: < 0.9.13-150400.3.3.1

Patches

Vulnerability mechanics

References

2

github.com/LibVNC/libvncserver/commit/bef41f6ec4097a8ee094f90a1b34a708fbd757ecnvdPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2022/09/msg00035.htmlnvdMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.