Search CVE reports


Toggle filters

1 – 10 of 22 results


CVE-2020-29260

Low priority
Needs evaluation

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().

6 affected packages

libvncserver, tightvnc, veyon, x11vnc, italc, vino

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvncserver Needs evaluation Needs evaluation Needs evaluation Needs evaluation
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
veyon Needs evaluation Needs evaluation Needs evaluation Not in release
x11vnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
italc Not in release Not in release Needs evaluation
vino Not affected Not affected Not affected Not affected
Show less packages

CVE-2020-25708

Medium priority

Some fixes available 16 of 50

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception,...

6 affected packages

x11vnc, libvncserver, vino, italc, tightvnc, veyon

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
x11vnc Not affected Not affected Not affected Not affected
libvncserver Not affected Not affected Fixed Fixed
vino Fixed Fixed Fixed Fixed
italc Not in release Not in release Not in release Needs evaluation
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
veyon Needs evaluation Needs evaluation Needs evaluation Not in release
Show less packages

CVE-2019-15681

Low priority

Some fixes available 19 of 74

LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another...

7 affected packages

krfb, libvncserver, tightvnc, veyon, x11vnc...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
krfb Needs evaluation Needs evaluation Needs evaluation Needs evaluation
libvncserver Not affected Not affected Not affected Fixed
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
veyon Needs evaluation Needs evaluation Needs evaluation Not in release
x11vnc Not affected Not affected Not affected Not affected
italc Not in release Not in release Not in release Fixed
vino Fixed Fixed Fixed Fixed
Show all 7 packages Show less packages

CVE-2018-7225

Medium priority

Some fixes available 31 of 44

An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified...

4 affected packages

italc, libvncserver, tightvnc, vino

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
italc Not in release Not in release Not in release Fixed
libvncserver Fixed Fixed Fixed Fixed
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
vino Fixed Fixed Fixed Fixed
Show less packages

CVE-2018-20750

Medium priority

Some fixes available 6 of 7

LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.

3 affected packages

italc, libvncserver, x11vnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
italc Not in release Fixed
libvncserver Not affected Fixed
x11vnc Not affected Not affected
Show less packages

CVE-2018-20749

Medium priority

Some fixes available 6 of 7

LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.

3 affected packages

libvncserver, italc, x11vnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvncserver Not affected Fixed
italc Not in release Fixed
x11vnc Not affected Not affected
Show less packages

CVE-2018-20748

Medium priority

Some fixes available 7 of 21

LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.

4 affected packages

italc, libvncserver, tightvnc, x11vnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
italc Not in release Not in release Not in release Fixed
libvncserver Not affected Not affected Not affected Fixed
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
x11vnc Not affected Not affected Not affected Not affected
Show less packages

CVE-2018-20024

Medium priority

Some fixes available 7 of 9

LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS.

4 affected packages

libvncserver, x11vnc, italc, ssvnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvncserver Not affected Not affected Not affected Fixed
x11vnc Not affected Not affected Not affected Not affected
italc Not in release Not in release Not in release Fixed
ssvnc Not affected Not affected Not affected Vulnerable
Show less packages

CVE-2018-20023

Medium priority

Some fixes available 6 of 7

LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker to read stack memory and can be abuse for information disclosure....

3 affected packages

italc, libvncserver, x11vnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
italc Not in release Fixed
libvncserver Not affected Fixed
x11vnc Not affected Not affected
Show less packages

CVE-2018-20022

Medium priority

Some fixes available 8 of 23

LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read stack memory and can be abuse for information...

5 affected packages

tightvnc, italc, libvncserver, ssvnc, x11vnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
italc Not in release Not in release Not in release Fixed
libvncserver Not affected Not affected Not affected Fixed
ssvnc Not affected Not affected Not affected Vulnerable
x11vnc Not affected Not affected Not affected Not affected
Show less packages