Search for packages
| purl | pkg:deb/debian/vino@2.28.2-2%2Bsqueeze1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6cas-bpxb-z3gt
Aliases: CVE-2011-0905 |
Affected by 5 other vulnerabilities. |
|
|
VCID-9f9d-nnkx-1uby
Aliases: CVE-2013-5745 |
Affected by 3 other vulnerabilities. |
|
|
VCID-f418-pw5w-zkew
Aliases: CVE-2012-4429 |
Affected by 3 other vulnerabilities. |
|
|
VCID-fm5c-rpf1-pyb1
Aliases: CVE-2011-0904 |
Affected by 5 other vulnerabilities. |
|
|
VCID-kr7e-s1j9-uuha
Aliases: CVE-2014-6053 |
Affected by 0 other vulnerabilities. |
|
|
VCID-vjz6-kw2t-cucm
Aliases: CVE-2019-15681 |
LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a. |
Affected by 0 other vulnerabilities. |
|
VCID-w91q-2f69-7fe9
Aliases: CVE-2018-7225 |
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||