Libvnc Project Libvncserver vulnerabilities, page 2

24 vulnerabilities

Known vulnerabilities in Libvnc Project Libvncserver, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2019-20839canonicalubuntu_linux+13
EPSS score
3.59%
libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.9.8CVE-2019-20788canonicalubuntu_linux+12
EPSS score
2.50%
libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690.7.5CVE-2019-20840canonicalubuntu_linux+13
EPSS score
2.61%
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode.7.5CVE-2019-15681alpinelibvncserver+28
EPSS score
2.91%
LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.