rpm package
almalinux/libvncserver
pkg:rpm/almalinux/libvncserver
Vulnerabilities (5)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-25708 | — | < 0.9.11-17.el8 | 0.9.11-17.el8 | Nov 27, 2020 | A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service. | ||
| CVE-2020-14397 | — | < 0.9.11-17.el8 | 0.9.11-17.el8 | Jun 17, 2020 | An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference. | ||
| CVE-2020-14405 | — | < 0.9.11-17.el8 | 0.9.11-17.el8 | Jun 17, 2020 | An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size. | ||
| CVE-2019-20839 | — | < 0.9.11-17.el8 | 0.9.11-17.el8 | Jun 17, 2020 | libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename. | ||
| CVE-2018-21247 | — | < 0.9.11-17.el8 | 0.9.11-17.el8 | Jun 17, 2020 | An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function. |
- CVE-2020-25708Nov 27, 2020affected < 0.9.11-17.el8fixed 0.9.11-17.el8
A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.
- CVE-2020-14397Jun 17, 2020affected < 0.9.11-17.el8fixed 0.9.11-17.el8
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.
- CVE-2020-14405Jun 17, 2020affected < 0.9.11-17.el8fixed 0.9.11-17.el8
An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.
- CVE-2019-20839Jun 17, 2020affected < 0.9.11-17.el8fixed 0.9.11-17.el8
libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
- CVE-2018-21247Jun 17, 2020affected < 0.9.11-17.el8fixed 0.9.11-17.el8
An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.