Search for packages
| purl | pkg:deb/debian/tightvnc@1:1.3.10-3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-6wch-1dap-aaar | LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker to consume excessive amount of resources like CPU and RAM |
CVE-2018-20021
|
| VCID-8urx-1teq-aaab | TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity. |
CVE-2019-8287
|
| VCID-9v5m-a7zv-aaab | The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc. |
CVE-2014-6053
|
| VCID-dppj-meh7-aaaq | TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity. |
CVE-2019-15680
|
| VCID-h93x-nurh-aaaj | An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets. |
CVE-2018-7225
|
| VCID-qkqm-z3zp-aaas | In TightVNC 1.3.10, there is an integer signedness error and resultant heap-based buffer overflow in InitialiseRFBConnection in rfbproto.c (for the vncviewer component). There is no check on the size given to malloc, e.g., -1 is accepted. This allocates a chunk of size zero, which will give a heap pointer. However, one can send 0xffffffff bytes of data, which can have a DoS impact or lead to remote code execution. |
CVE-2022-23967
|
| VCID-suan-vghf-aaad | TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity. |
CVE-2019-15679
|
| VCID-tnv1-3t49-aaam | LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a. |
CVE-2019-15681
|
| VCID-wnd7-4qex-aaab | LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak stack memory layout and in bypassing ASLR |
CVE-2018-20022
|
| VCID-zvcs-1yg4-aaaq | TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via network connectivity. |
CVE-2019-15678
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T19:13:32.873709+00:00 | Debian Oval Importer | Fixing | VCID-dppj-meh7-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T19:03:38.913611+00:00 | Debian Oval Importer | Fixing | VCID-tnv1-3t49-aaam | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T18:28:59.511825+00:00 | Debian Oval Importer | Fixing | VCID-zvcs-1yg4-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T18:22:46.520873+00:00 | Debian Oval Importer | Fixing | VCID-8urx-1teq-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T18:08:59.546700+00:00 | Debian Oval Importer | Fixing | VCID-wnd7-4qex-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T06:23:20.580847+00:00 | Debian Oval Importer | Fixing | VCID-6wch-1dap-aaar | None | 36.1.3 |
| 2025-06-21T06:09:04.970495+00:00 | Debian Oval Importer | Fixing | VCID-zvcs-1yg4-aaaq | None | 36.1.3 |
| 2025-06-21T05:58:45.881705+00:00 | Debian Oval Importer | Fixing | VCID-8urx-1teq-aaab | None | 36.1.3 |
| 2025-06-21T05:38:16.954259+00:00 | Debian Oval Importer | Fixing | VCID-dppj-meh7-aaaq | None | 36.1.3 |
| 2025-06-21T04:37:25.766172+00:00 | Debian Oval Importer | Fixing | VCID-9v5m-a7zv-aaab | None | 36.1.3 |
| 2025-06-21T04:36:14.141297+00:00 | Debian Oval Importer | Fixing | VCID-wnd7-4qex-aaab | None | 36.1.3 |
| 2025-06-21T04:18:16.785494+00:00 | Debian Oval Importer | Fixing | VCID-h93x-nurh-aaaj | None | 36.1.3 |
| 2025-06-21T02:14:18.840706+00:00 | Debian Oval Importer | Fixing | VCID-qkqm-z3zp-aaas | None | 36.1.3 |
| 2025-06-21T02:11:34.592318+00:00 | Debian Oval Importer | Fixing | VCID-tnv1-3t49-aaam | None | 36.1.3 |
| 2025-06-21T01:52:43.001397+00:00 | Debian Oval Importer | Fixing | VCID-suan-vghf-aaad | None | 36.1.3 |
| 2025-06-08T12:19:19.517768+00:00 | Debian Oval Importer | Fixing | VCID-suan-vghf-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T11:42:21.557617+00:00 | Debian Oval Importer | Fixing | VCID-dppj-meh7-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T11:32:51.242065+00:00 | Debian Oval Importer | Fixing | VCID-tnv1-3t49-aaam | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:59:30.076297+00:00 | Debian Oval Importer | Fixing | VCID-zvcs-1yg4-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:53:31.537442+00:00 | Debian Oval Importer | Fixing | VCID-8urx-1teq-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:40:26.870381+00:00 | Debian Oval Importer | Fixing | VCID-wnd7-4qex-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T00:02:34.597330+00:00 | Debian Oval Importer | Fixing | VCID-6wch-1dap-aaar | None | 36.1.0 |
| 2025-06-07T23:47:56.539544+00:00 | Debian Oval Importer | Fixing | VCID-zvcs-1yg4-aaaq | None | 36.1.0 |
| 2025-06-07T23:37:22.843914+00:00 | Debian Oval Importer | Fixing | VCID-8urx-1teq-aaab | None | 36.1.0 |
| 2025-06-07T23:16:23.598659+00:00 | Debian Oval Importer | Fixing | VCID-dppj-meh7-aaaq | None | 36.1.0 |
| 2025-06-07T22:14:04.172197+00:00 | Debian Oval Importer | Fixing | VCID-9v5m-a7zv-aaab | None | 36.1.0 |
| 2025-06-07T22:12:51.086804+00:00 | Debian Oval Importer | Fixing | VCID-wnd7-4qex-aaab | None | 36.1.0 |
| 2025-06-07T21:54:12.191627+00:00 | Debian Oval Importer | Fixing | VCID-h93x-nurh-aaaj | None | 36.1.0 |
| 2025-06-07T19:38:05.811300+00:00 | Debian Oval Importer | Fixing | VCID-qkqm-z3zp-aaas | None | 36.1.0 |
| 2025-06-07T19:35:20.713800+00:00 | Debian Oval Importer | Fixing | VCID-tnv1-3t49-aaam | None | 36.1.0 |
| 2025-06-07T19:16:04.523193+00:00 | Debian Oval Importer | Fixing | VCID-suan-vghf-aaad | None | 36.1.0 |
| 2025-04-12T22:31:45.169755+00:00 | Debian Oval Importer | Fixing | VCID-6wch-1dap-aaar | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:25:34.687658+00:00 | Debian Oval Importer | Fixing | VCID-h93x-nurh-aaaj | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T20:29:01.094064+00:00 | Debian Oval Importer | Fixing | VCID-9v5m-a7zv-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T18:05:14.283397+00:00 | Debian Oval Importer | Fixing | VCID-suan-vghf-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:27:08.779316+00:00 | Debian Oval Importer | Fixing | VCID-dppj-meh7-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:17:16.044454+00:00 | Debian Oval Importer | Fixing | VCID-tnv1-3t49-aaam | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:42:18.694848+00:00 | Debian Oval Importer | Fixing | VCID-zvcs-1yg4-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:35:59.764378+00:00 | Debian Oval Importer | Fixing | VCID-8urx-1teq-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:22:09.864117+00:00 | Debian Oval Importer | Fixing | VCID-wnd7-4qex-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-07T22:34:48.868204+00:00 | Debian Oval Importer | Fixing | VCID-6wch-1dap-aaar | None | 36.0.0 |
| 2025-04-07T22:20:04.371421+00:00 | Debian Oval Importer | Fixing | VCID-zvcs-1yg4-aaaq | None | 36.0.0 |
| 2025-04-07T22:09:28.989036+00:00 | Debian Oval Importer | Fixing | VCID-8urx-1teq-aaab | None | 36.0.0 |
| 2025-04-07T21:48:21.016841+00:00 | Debian Oval Importer | Fixing | VCID-dppj-meh7-aaaq | None | 36.0.0 |
| 2025-04-07T20:45:35.345367+00:00 | Debian Oval Importer | Fixing | VCID-9v5m-a7zv-aaab | None | 36.0.0 |
| 2025-04-07T20:44:19.593157+00:00 | Debian Oval Importer | Fixing | VCID-wnd7-4qex-aaab | None | 36.0.0 |
| 2025-04-07T20:24:41.821266+00:00 | Debian Oval Importer | Fixing | VCID-h93x-nurh-aaaj | None | 36.0.0 |
| 2025-04-07T18:15:48.740100+00:00 | Debian Oval Importer | Fixing | VCID-qkqm-z3zp-aaas | None | 36.0.0 |
| 2025-04-07T18:13:03.107936+00:00 | Debian Oval Importer | Fixing | VCID-tnv1-3t49-aaam | None | 36.0.0 |
| 2025-04-07T17:53:53.670039+00:00 | Debian Oval Importer | Fixing | VCID-suan-vghf-aaad | None | 36.0.0 |