Search CVE reports


Toggle filters

1 – 10 of 45 results


CVE-2020-29260

Low priority
Needs evaluation

libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().

6 affected packages

libvncserver, tightvnc, veyon, x11vnc, italc, vino

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvncserver Needs evaluation Needs evaluation Needs evaluation Needs evaluation
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
veyon Needs evaluation Needs evaluation Needs evaluation Not in release
x11vnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
italc Not in release Not in release Needs evaluation
vino Not affected Not affected Not affected Not affected
Show less packages

CVE-2020-25708

Medium priority

Some fixes available 16 of 50

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception,...

6 affected packages

x11vnc, libvncserver, vino, italc, tightvnc, veyon

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
x11vnc Not affected Not affected Not affected Not affected
libvncserver Not affected Not affected Fixed Fixed
vino Fixed Fixed Fixed Fixed
italc Not in release Not in release Not in release Needs evaluation
tightvnc Needs evaluation Needs evaluation Needs evaluation Needs evaluation
veyon Needs evaluation Needs evaluation Needs evaluation Not in release
Show less packages

CVE-2020-14405

Medium priority

Some fixes available 3 of 24

An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.

3 affected packages

veyon, x11vnc, libvncserver

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
veyon Needs evaluation Needs evaluation Needs evaluation Not in release
x11vnc Not affected Not affected Not affected Not affected
libvncserver Not affected Not affected Fixed Fixed
Show less packages

CVE-2020-14404

Medium priority

Some fixes available 16 of 37

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings.

4 affected packages

veyon, x11vnc, libvncserver, vino

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
veyon Needs evaluation Needs evaluation Needs evaluation Not in release
x11vnc Not affected Not affected Not affected Not affected
libvncserver Not affected Not affected Fixed Fixed
vino Fixed Fixed Fixed Fixed
Show less packages

CVE-2020-14403

Medium priority

Some fixes available 16 of 37

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings.

4 affected packages

x11vnc, libvncserver, veyon, vino

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
x11vnc Not affected Not affected Not affected Not affected
libvncserver Not affected Not affected Fixed Fixed
veyon Needs evaluation Needs evaluation Needs evaluation Not in release
vino Fixed Fixed Fixed Fixed
Show less packages

CVE-2020-14402

Medium priority

Some fixes available 16 of 37

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings.

4 affected packages

libvncserver, vino, veyon, x11vnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvncserver Not affected Not affected Fixed Fixed
vino Fixed Fixed Fixed Fixed
veyon Needs evaluation Needs evaluation Needs evaluation Not in release
x11vnc Not affected Not affected Not affected Not affected
Show less packages

CVE-2020-14401

Medium priority

Some fixes available 3 of 24

An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.

3 affected packages

veyon, x11vnc, libvncserver

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
veyon Needs evaluation Needs evaluation Needs evaluation Not in release
x11vnc Not affected Not affected Not affected Not affected
libvncserver Not affected Not affected Fixed Fixed
Show less packages

CVE-2020-14400

Medium priority

Some fixes available 3 of 18

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path...

3 affected packages

veyon, x11vnc, libvncserver

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
veyon Not affected Not affected Not affected Not in release
x11vnc Not affected Not affected Not affected Not affected
libvncserver Not affected Not affected Fixed Fixed
Show less packages

CVE-2020-14399

Medium priority

Some fixes available 3 of 18

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed.

3 affected packages

libvncserver, veyon, x11vnc

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvncserver Not affected Not affected Fixed Fixed
veyon Not affected Not affected Not affected Not in release
x11vnc Not affected Not affected Not affected Not affected
Show less packages

CVE-2020-14398

Medium priority

Some fixes available 3 of 24

An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c.

3 affected packages

libvncserver, x11vnc, veyon

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvncserver Not affected Not affected Fixed Fixed
x11vnc Not affected Not affected Not affected Not affected
veyon Needs evaluation Needs evaluation Needs evaluation Not in release
Show less packages