Search CVE reports


Toggle filters

31 – 40 of 47 results


CVE-2018-20022

Medium priority

Some fixes available 8 of 24

LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read stack memory and can be abuse for information...

5 affected packages

tightvnc, italc, libvncserver, ssvnc, x11vnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
italc Not in release Not in release Not in release Fixed
libvncserver Not affected Not affected Not affected Fixed
ssvnc Not affected Not affected Not affected Vulnerable
x11vnc Not affected Not affected Not affected Not affected
Show less packages

CVE-2018-20021

Medium priority

Some fixes available 8 of 24

LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker to consume excessive amount of resources like CPU and RAM

5 affected packages

italc, tightvnc, libvncserver, ssvnc, x11vnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
italc Not in release Not in release Not in release Fixed
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
libvncserver Not affected Not affected Not affected Fixed
ssvnc Not affected Not affected Not affected Vulnerable
x11vnc Not affected Not affected Not affected Not affected
Show less packages

CVE-2018-20020

Medium priority

Some fixes available 8 of 24

LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client code that can result remote code execution

5 affected packages

tightvnc, libvncserver, x11vnc, italc, ssvnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
libvncserver Not affected Not affected Not affected Fixed
x11vnc Not affected Not affected Not affected Not affected
italc Not in release Not in release Not in release Fixed
ssvnc Not affected Not affected Not affected Vulnerable
Show less packages

CVE-2018-20019

Medium priority

Some fixes available 6 of 7

LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution

3 affected packages

italc, libvncserver, x11vnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
italc Not in release Fixed
libvncserver Not affected Fixed
x11vnc Not affected Not affected
Show less packages

CVE-2018-15127

Medium priority

Some fixes available 6 of 7

LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution

3 affected packages

libvncserver, x11vnc, italc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvncserver Not affected Fixed
x11vnc Not affected Not affected
italc Not in release Fixed
Show less packages

CVE-2018-15126

Medium priority

Some fixes available 4 of 5

LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution

2 affected packages

libvncserver, x11vnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvncserver Fixed
x11vnc Not affected
Show less packages

CVE-2018-7225

Medium priority

Some fixes available 33 of 47

An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified...

4 affected packages

italc, libvncserver, tightvnc, vino

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
italc Not in release Not in release Not in release Fixed
libvncserver Fixed Fixed Fixed Fixed
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
vino Fixed Fixed Fixed Fixed
Show less packages

CVE-2016-9942

Medium priority
Fixed

Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message...

2 affected packages

italc, libvncserver

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
italc Not in release Not affected
libvncserver
Show less packages

CVE-2016-9941

Medium priority
Fixed

Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate...

2 affected packages

italc, libvncserver

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
italc Not in release Not affected
libvncserver
Show less packages

CVE-2014-6055

Medium priority

Some fixes available 4 of 5

Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a...

3 affected packages

krfb, libvncserver, italc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
krfb
libvncserver
italc Not in release Not affected
Show less packages