Search for packages
| purl | pkg:deb/debian/libvncserver@0.9.15%2Bdfsg-3?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1d5d-ajfs-tffv | Multiple vulnerabilities have been found in LibVNCServer/LibVNCClient, the worst of which allows remote attackers to execute arbitrary code when connecting to a malicious server. |
CVE-2016-9941
|
| VCID-1hmm-y54k-3uhm | security update |
CVE-2014-6053
|
| VCID-377b-31s1-b3ek | Multiple vulnerabilities have been found in LibVNCServer/LibVNCClient, the worst of which allows remote attackers to execute arbitrary code when connecting to a malicious server. |
CVE-2016-9942
|
| VCID-3817-suhy-xfhd | Multiple vulnerabilities have been found in ssvnc, the worst of which could result in the arbitrary execution of code. |
CVE-2018-20020
|
| VCID-6cgs-ggbr-rqdg | VNC servers created with LibVNCServer accept insecure protocol types, even when the server does not offer it, resulting in unauthorized access to the server. |
CVE-2006-2450
|
| VCID-6w3g-x86a-sfbj | libvncserver: libvncserver/corre.c allows out-of-bounds access via encodings |
CVE-2020-14402
|
| VCID-7taj-t1kg-h3a9 | libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS |
CVE-2020-25708
|
| VCID-81pq-5gvp-zfgw | LibVNCServer: LibVNCServer: Denial of Service via specially crafted HTTP requests |
CVE-2026-32854
|
| VCID-9eyh-gzse-8qdk | libvncserver: libvncserver/scale.c has a pixel_value integer overflow |
CVE-2020-14401
|
| VCID-9nha-t527-rfhs | Multiple vulnerabilities have been found in LibVNCServer, the worst of which could result in the arbitrary execution of code. |
CVE-2018-20023
|
| VCID-aphg-42c4-9yct | LibVNCServer: LibVNCServer: Information disclosure or Denial of Service via heap out-of-bounds read in UltraZip encoding |
CVE-2026-32853
|
| VCID-bngs-4nkn-rbh1 | Multiple vulnerabilities have been found in ssvnc, the worst of which could result in the arbitrary execution of code. |
CVE-2018-20022
|
| VCID-ce4w-vd75-n3gg | This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2012. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution. Please see the package list and CVE identifiers below for more information. |
CVE-2011-0905
|
| VCID-d3c1-uv78-a7cj | libvncserver: libvncserver/rre.c allows out-of-bounds access via encodings |
CVE-2020-14404
|
| VCID-dmax-ew5t-4fg4 | libvncserver: libvncclient/tls_openssl.c has a NULL pointer dereference |
CVE-2020-14396
|
| VCID-du88-cbhp-rkcc | Multiple vulnerabilities have been found in ssvnc, the worst of which could result in the arbitrary execution of code. |
CVE-2018-20021
|
| VCID-dzex-yhec-uydq | libvncserver: websocket decoding buffer overflow |
CVE-2017-18922
|
| VCID-e3u6-fpje-tubq | security update |
CVE-2018-15126
|
| VCID-efft-1f56-jqeq | Multiple vulnerabilities have been found in LibVNCServer, the worst of which could result in the arbitrary execution of code. |
CVE-2018-7225
|
| VCID-h8bk-uaqv-puap | security update |
CVE-2018-21247
|
| VCID-j4kf-j3t8-fbfb | libvncserver: an improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c |
CVE-2020-14398
|
| VCID-kzk2-vaa2-6bfa | libvncserver: byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c |
CVE-2020-14399
|
| VCID-nrnp-2yeq-y7ap | security update |
CVE-2014-6052
|
| VCID-nw65-u5bu-yqbv | security update |
CVE-2018-6307
|
| VCID-nxh7-7s8e-g3ec | libvncserver: libvncserver/hextile.c allows out-of-bounds access via encodings |
CVE-2020-14403
|
| VCID-p9tk-fn6b-cbbv | libvncserver: Multiple heap out-of-bound writes in VNC client code (Incomplete fix for CVE-2018-20019) |
CVE-2018-20748
|
| VCID-pkx1-zfqh-mqe8 | This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2012. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution. Please see the package list and CVE identifiers below for more information. |
CVE-2011-0904
|
| VCID-q3t7-3yq6-gkan | libvncserver: unaligned accesses in hybiReadAndDecode can lead to a crash |
CVE-2019-20840
|
| VCID-q4eg-8ph7-nfer | libvncserver: information disclosure and ASLR bypass |
CVE-2019-15681
|
| VCID-q89b-2emb-j3br | Multiple vulnerabilities have been found in ssvnc, the worst of which could result in the arbitrary execution of code. |
CVE-2018-20024
|
| VCID-qde7-y8q2-2bgq | libvncserver: HandleCursorShape() integer overflow resulting in heap-based buffer overflow |
CVE-2019-15690
|
| VCID-qfyp-1xhm-13au | libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference |
CVE-2020-14397
|
| VCID-qukp-tx5e-6yhe | libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution (Incomplete fix for CVE-2018-15127) |
CVE-2018-20750
|
| VCID-sgkq-a36z-gyfp | libvncserver: buffer overflow in ConnectClientToUnixSock() |
CVE-2019-20839
|
| VCID-tj14-ykx8-qqgn | libvncserver: integer overflow and heap-based buffer overflow in libvncclient/cursor.c in HandleCursorShape function |
CVE-2019-20788
|
| VCID-tnzy-mktx-e7fm | libvncserver: a memory leak via the function rfbClientCleanup() may lead to a DoS |
CVE-2020-29260
|
| VCID-ug79-puqk-33ce | An integer overflow in TigerVNC might allow remote attackers to execute arbitrary code. |
CVE-2014-6051
|
| VCID-uuzf-kk8s-qyaa | security update |
CVE-2014-6054
|
| VCID-v7mt-jtes-h3bz | libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution (Incomplete fix for CVE-2018-15127) |
CVE-2018-20749
|
| VCID-vywb-buqd-w3dw | Multiple vulnerabilities have been found in LibVNCServer, the worst of which could result in the arbitrary execution of code. |
CVE-2018-20019
|
| VCID-wzpf-4nu7-xyc6 | libvncserver: libvncclient/rfbproto.c does not limit TextChat size |
CVE-2020-14405
|
| VCID-x78k-5wm4-kkaj | libvncserver: byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c |
CVE-2020-14400
|
| VCID-xk15-h8qm-gfbf | security update |
CVE-2014-6055
|
| VCID-xqer-ndmy-gfgp | security update |
CVE-2018-15127
|