https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:21:20.355517+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1811 ALSA-2021:1811 — Moderate: libvncserver security update 2026-10-04T07:21:20.573999+00:00

Affected: AlmaLinux:8: libvncserver, AlmaLinux:8: libvncserver-devel

LibVNCServer is a C library that enables you to implement VNC server functionality into own programs.

Security Fix(es):

* libvncserver: uninitialized memory contents are vulnerable to Information Leak (CVE-2018-21247)

* libvncserver: buffer overflow in ConnectClientToUnixSock() (CVE-2019-20839)

* libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference (CVE-2020-14397)

* libvncserver: libvncclient/rfbproto.c does not limit TextChat size (CVE-2020-14405)

* libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS (CVE-2020-25708)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-03737 bdu:2021-03737 2026-10-04T07:21:20.574069+00:00 bdu:2021-03737 https://cve.radiocsirt.org/vuln/euvd-2026-45724 EUVD-2026-45724 2026-10-04T07:21:20.574086+00:00 EUVD-2026-45724 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25708 fkie_cve-2020-25708 2026-10-04T07:21:20.574097+00:00

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-3xcq-6vjj-wqx7 GHSA-3xcq-6vjj-wqx7 2026-10-04T07:21:20.574120+00:00

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2020-25708 gsd-2020-25708 2026-10-04T07:21:20.574134+00:00 gsd-2020-25708 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2025-1 openSUSE-SU-2020:2025-1 — Security update for LibVNCServer 2026-10-04T07:21:20.574145+00:00

Security update for LibVNCServer

 https://cve.radiocsirt.org/vuln/suse-su-2020:14549-1 SUSE-SU-2020:14549-1 — Security update for LibVNCServer 2026-10-04T07:21:20.574160+00:00

Security update for LibVNCServer

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25708 UBUNTU-CVE-2020-25708 2026-10-04T07:21:20.574175+00:00

Affected: Ubuntu:Pro:14.04:LTS: tightvnc, Ubuntu:14.04:LTS: x11vnc, Ubuntu:16.04:LTS: libvncserver, Ubuntu:16.04:LTS: vino, Ubuntu:16.04:LTS: italc, Ubuntu:16.04:LTS: tightvnc, Ubuntu:18.04:LTS: libvncserver, Ubuntu:18.04:LTS: vino, Ubuntu:18.04:LTS: italc, Ubuntu:18.04:LTS: tightvnc and 14 more

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.