Search for packages
| purl | pkg:deb/debian/libvncserver@0.9.13%2Bdfsg-2%2Bdeb11u1 |
| Next non-vulnerable version | 0.9.15+dfsg-1+deb13u1 |
| Latest non-vulnerable version | 0.9.15+dfsg-3 |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-81pq-5gvp-zfgw
Aliases: CVE-2026-32854 |
LibVNCServer: LibVNCServer: Denial of Service via specially crafted HTTP requests |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-aphg-42c4-9yct
Aliases: CVE-2026-32853 |
LibVNCServer: LibVNCServer: Information disclosure or Denial of Service via heap out-of-bounds read in UltraZip encoding |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-6w3g-x86a-sfbj | libvncserver: libvncserver/corre.c allows out-of-bounds access via encodings |
CVE-2020-14402
|
| VCID-7taj-t1kg-h3a9 | libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS |
CVE-2020-25708
|
| VCID-9eyh-gzse-8qdk | libvncserver: libvncserver/scale.c has a pixel_value integer overflow |
CVE-2020-14401
|
| VCID-d3c1-uv78-a7cj | libvncserver: libvncserver/rre.c allows out-of-bounds access via encodings |
CVE-2020-14404
|
| VCID-dmax-ew5t-4fg4 | libvncserver: libvncclient/tls_openssl.c has a NULL pointer dereference |
CVE-2020-14396
|
| VCID-dzex-yhec-uydq | libvncserver: websocket decoding buffer overflow |
CVE-2017-18922
|
| VCID-j4kf-j3t8-fbfb | libvncserver: an improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c |
CVE-2020-14398
|
| VCID-kzk2-vaa2-6bfa | libvncserver: byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c |
CVE-2020-14399
|
| VCID-nxh7-7s8e-g3ec | libvncserver: libvncserver/hextile.c allows out-of-bounds access via encodings |
CVE-2020-14403
|
| VCID-q3t7-3yq6-gkan | libvncserver: unaligned accesses in hybiReadAndDecode can lead to a crash |
CVE-2019-20840
|
| VCID-q4eg-8ph7-nfer | libvncserver: information disclosure and ASLR bypass |
CVE-2019-15681
|
| VCID-qde7-y8q2-2bgq | libvncserver: HandleCursorShape() integer overflow resulting in heap-based buffer overflow |
CVE-2019-15690
|
| VCID-qfyp-1xhm-13au | libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference |
CVE-2020-14397
|
| VCID-sgkq-a36z-gyfp | libvncserver: buffer overflow in ConnectClientToUnixSock() |
CVE-2019-20839
|
| VCID-tj14-ykx8-qqgn | libvncserver: integer overflow and heap-based buffer overflow in libvncclient/cursor.c in HandleCursorShape function |
CVE-2019-20788
|
| VCID-tnzy-mktx-e7fm | libvncserver: a memory leak via the function rfbClientCleanup() may lead to a DoS |
CVE-2020-29260
|
| VCID-wzpf-4nu7-xyc6 | libvncserver: libvncclient/rfbproto.c does not limit TextChat size |
CVE-2020-14405
|
| VCID-x78k-5wm4-kkaj | libvncserver: byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c |
CVE-2020-14400
|