Search for packages
| purl | pkg:deb/debian/tightvnc@1.3.9-4 |
| Next non-vulnerable version | 1:1.3.10-3 |
| Latest non-vulnerable version | 1:1.3.10-3 |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6wch-1dap-aaar
Aliases: CVE-2018-20021 |
LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker to consume excessive amount of resources like CPU and RAM |
Affected by 10 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-8urx-1teq-aaab
Aliases: CVE-2019-8287 |
TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear to be exploitable via network connectivity. |
Affected by 10 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-9v5m-a7zv-aaab
Aliases: CVE-2014-6053 |
The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc. |
Affected by 10 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-dppj-meh7-aaaq
Aliases: CVE-2019-15680 |
TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity. |
Affected by 10 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-h93x-nurh-aaaj
Aliases: CVE-2018-7225 |
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets. |
Affected by 10 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-qkqm-z3zp-aaas
Aliases: CVE-2022-23967 |
In TightVNC 1.3.10, there is an integer signedness error and resultant heap-based buffer overflow in InitialiseRFBConnection in rfbproto.c (for the vncviewer component). There is no check on the size given to malloc, e.g., -1 is accepted. This allocates a chunk of size zero, which will give a heap pointer. However, one can send 0xffffffff bytes of data, which can have a DoS impact or lead to remote code execution. |
Affected by 10 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-suan-vghf-aaad
Aliases: CVE-2019-15679 |
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity. |
Affected by 10 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-tnv1-3t49-aaam
Aliases: CVE-2019-15681 |
LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a. |
Affected by 10 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-wnd7-4qex-aaab
Aliases: CVE-2018-20022 |
LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak stack memory layout and in bypassing ASLR |
Affected by 10 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-zvcs-1yg4-aaaq
Aliases: CVE-2019-15678 |
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via network connectivity. |
Affected by 10 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T19:13:32.861348+00:00 | Debian Oval Importer | Affected by | VCID-dppj-meh7-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T19:03:38.898691+00:00 | Debian Oval Importer | Affected by | VCID-tnv1-3t49-aaam | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T18:28:59.498611+00:00 | Debian Oval Importer | Affected by | VCID-zvcs-1yg4-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T18:22:46.505161+00:00 | Debian Oval Importer | Affected by | VCID-8urx-1teq-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T18:08:59.534517+00:00 | Debian Oval Importer | Affected by | VCID-wnd7-4qex-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T17:26:21.702422+00:00 | Debian Oval Importer | Affected by | VCID-suan-vghf-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T17:12:04.714743+00:00 | Debian Oval Importer | Affected by | VCID-dppj-meh7-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T16:29:41.043569+00:00 | Debian Oval Importer | Affected by | VCID-wnd7-4qex-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T16:14:57.350468+00:00 | Debian Oval Importer | Affected by | VCID-9v5m-a7zv-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:52:12.163854+00:00 | Debian Oval Importer | Affected by | VCID-6wch-1dap-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:17:57.158928+00:00 | Debian Oval Importer | Affected by | VCID-h93x-nurh-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:09:05.604288+00:00 | Debian Oval Importer | Affected by | VCID-zvcs-1yg4-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:41:34.298678+00:00 | Debian Oval Importer | Affected by | VCID-tnv1-3t49-aaam | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T11:19:14.122933+00:00 | Debian Oval Importer | Affected by | VCID-8urx-1teq-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T01:28:38.584637+00:00 | Debian Oval Importer | Affected by | VCID-h93x-nurh-aaaj | None | 36.1.3 |
| 2025-06-21T00:38:48.064655+00:00 | Debian Oval Importer | Affected by | VCID-qkqm-z3zp-aaas | None | 36.1.3 |
| 2025-06-21T00:14:00.543283+00:00 | Debian Oval Importer | Affected by | VCID-9v5m-a7zv-aaab | None | 36.1.3 |
| 2025-06-20T23:50:47.917435+00:00 | Debian Oval Importer | Affected by | VCID-zvcs-1yg4-aaaq | None | 36.1.3 |
| 2025-06-20T23:50:43.856906+00:00 | Debian Oval Importer | Affected by | VCID-tnv1-3t49-aaam | None | 36.1.3 |
| 2025-06-20T23:24:23.350486+00:00 | Debian Oval Importer | Affected by | VCID-8urx-1teq-aaab | None | 36.1.3 |
| 2025-06-20T23:23:26.019358+00:00 | Debian Oval Importer | Affected by | VCID-6wch-1dap-aaar | None | 36.1.3 |
| 2025-06-20T23:10:32.858019+00:00 | Debian Oval Importer | Affected by | VCID-suan-vghf-aaad | None | 36.1.3 |
| 2025-06-20T21:52:20.415078+00:00 | Debian Oval Importer | Affected by | VCID-dppj-meh7-aaaq | None | 36.1.3 |
| 2025-06-20T20:23:22.735161+00:00 | Debian Oval Importer | Affected by | VCID-wnd7-4qex-aaab | None | 36.1.3 |
| 2025-06-08T12:19:19.508683+00:00 | Debian Oval Importer | Affected by | VCID-suan-vghf-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T11:42:21.548512+00:00 | Debian Oval Importer | Affected by | VCID-dppj-meh7-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T11:32:51.233088+00:00 | Debian Oval Importer | Affected by | VCID-tnv1-3t49-aaam | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:59:30.065417+00:00 | Debian Oval Importer | Affected by | VCID-zvcs-1yg4-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:53:31.528140+00:00 | Debian Oval Importer | Affected by | VCID-8urx-1teq-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:40:26.861257+00:00 | Debian Oval Importer | Affected by | VCID-wnd7-4qex-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:05:37.462720+00:00 | Debian Oval Importer | Affected by | VCID-suan-vghf-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T09:53:43.877473+00:00 | Debian Oval Importer | Affected by | VCID-dppj-meh7-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T09:15:32.679785+00:00 | Debian Oval Importer | Affected by | VCID-wnd7-4qex-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T09:02:02.479417+00:00 | Debian Oval Importer | Affected by | VCID-9v5m-a7zv-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:45:33.092629+00:00 | Debian Oval Importer | Affected by | VCID-6wch-1dap-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:11:16.263185+00:00 | Debian Oval Importer | Affected by | VCID-h93x-nurh-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:02:29.369019+00:00 | Debian Oval Importer | Affected by | VCID-zvcs-1yg4-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:35:49.611695+00:00 | Debian Oval Importer | Affected by | VCID-tnv1-3t49-aaam | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T04:43:12.847399+00:00 | Debian Oval Importer | Affected by | VCID-8urx-1teq-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T18:51:32.083085+00:00 | Debian Oval Importer | Affected by | VCID-h93x-nurh-aaaj | None | 36.1.0 |
| 2025-06-07T18:01:23.659756+00:00 | Debian Oval Importer | Affected by | VCID-qkqm-z3zp-aaas | None | 36.1.0 |
| 2025-06-07T17:36:52.327956+00:00 | Debian Oval Importer | Affected by | VCID-9v5m-a7zv-aaab | None | 36.1.0 |
| 2025-06-07T17:13:40.117851+00:00 | Debian Oval Importer | Affected by | VCID-zvcs-1yg4-aaaq | None | 36.1.0 |
| 2025-06-07T17:13:36.012101+00:00 | Debian Oval Importer | Affected by | VCID-tnv1-3t49-aaam | None | 36.1.0 |
| 2025-06-07T16:47:17.244291+00:00 | Debian Oval Importer | Affected by | VCID-8urx-1teq-aaab | None | 36.1.0 |
| 2025-06-07T16:46:20.257885+00:00 | Debian Oval Importer | Affected by | VCID-6wch-1dap-aaar | None | 36.1.0 |
| 2025-06-07T16:33:40.711534+00:00 | Debian Oval Importer | Affected by | VCID-suan-vghf-aaad | None | 36.1.0 |
| 2025-06-07T15:15:38.581257+00:00 | Debian Oval Importer | Affected by | VCID-dppj-meh7-aaaq | None | 36.1.0 |
| 2025-06-07T13:58:46.360295+00:00 | Debian Oval Importer | Affected by | VCID-wnd7-4qex-aaab | None | 36.1.0 |
| 2025-04-12T22:31:45.139335+00:00 | Debian Oval Importer | Affected by | VCID-6wch-1dap-aaar | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:25:34.658251+00:00 | Debian Oval Importer | Affected by | VCID-h93x-nurh-aaaj | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T20:29:01.064778+00:00 | Debian Oval Importer | Affected by | VCID-9v5m-a7zv-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T18:05:14.253527+00:00 | Debian Oval Importer | Affected by | VCID-suan-vghf-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:27:08.749062+00:00 | Debian Oval Importer | Affected by | VCID-dppj-meh7-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:17:16.014110+00:00 | Debian Oval Importer | Affected by | VCID-tnv1-3t49-aaam | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:42:18.663155+00:00 | Debian Oval Importer | Affected by | VCID-zvcs-1yg4-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:35:59.735251+00:00 | Debian Oval Importer | Affected by | VCID-8urx-1teq-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:22:09.826591+00:00 | Debian Oval Importer | Affected by | VCID-wnd7-4qex-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-08T08:37:57.064835+00:00 | Debian Oval Importer | Affected by | VCID-suan-vghf-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T08:25:58.610727+00:00 | Debian Oval Importer | Affected by | VCID-dppj-meh7-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T07:47:35.836067+00:00 | Debian Oval Importer | Affected by | VCID-wnd7-4qex-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T07:33:43.200134+00:00 | Debian Oval Importer | Affected by | VCID-9v5m-a7zv-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:18:06.306308+00:00 | Debian Oval Importer | Affected by | VCID-6wch-1dap-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:43:49.442614+00:00 | Debian Oval Importer | Affected by | VCID-h93x-nurh-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:35:12.757882+00:00 | Debian Oval Importer | Affected by | VCID-zvcs-1yg4-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:08:08.029315+00:00 | Debian Oval Importer | Affected by | VCID-tnv1-3t49-aaam | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T03:14:13.440603+00:00 | Debian Oval Importer | Affected by | VCID-8urx-1teq-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T17:29:19.493037+00:00 | Debian Oval Importer | Affected by | VCID-h93x-nurh-aaaj | None | 36.0.0 |
| 2025-04-07T16:38:23.038846+00:00 | Debian Oval Importer | Affected by | VCID-qkqm-z3zp-aaas | None | 36.0.0 |
| 2025-04-07T16:11:35.048682+00:00 | Debian Oval Importer | Affected by | VCID-9v5m-a7zv-aaab | None | 36.0.0 |
| 2025-04-07T15:47:26.261302+00:00 | Debian Oval Importer | Affected by | VCID-zvcs-1yg4-aaaq | None | 36.0.0 |
| 2025-04-07T15:47:22.014564+00:00 | Debian Oval Importer | Affected by | VCID-tnv1-3t49-aaam | None | 36.0.0 |
| 2025-04-07T15:19:57.057153+00:00 | Debian Oval Importer | Affected by | VCID-8urx-1teq-aaab | None | 36.0.0 |
| 2025-04-07T15:18:57.230761+00:00 | Debian Oval Importer | Affected by | VCID-6wch-1dap-aaar | None | 36.0.0 |
| 2025-04-07T15:05:46.750748+00:00 | Debian Oval Importer | Affected by | VCID-suan-vghf-aaad | None | 36.0.0 |
| 2025-04-07T13:47:13.793993+00:00 | Debian Oval Importer | Affected by | VCID-dppj-meh7-aaaq | None | 36.0.0 |
| 2025-04-07T12:33:16.686187+00:00 | Debian Oval Importer | Affected by | VCID-wnd7-4qex-aaab | None | 36.0.0 |