https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 13:48:43 +0000 https://cve.radiocsirt.org/vuln/certa-2011-avi-273 certa-2011-avi-273 https://cve.radiocsirt.org/vuln/certa-2011-avi-273 https://cve.radiocsirt.org/vuln/euvd-2026-114320 EUVD-2026-114320 https://cve.radiocsirt.org/vuln/euvd-2026-114320 https://cve.radiocsirt.org/vuln/fkie_cve-2011-0904 <p>The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.</p> <p>The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-0904 https://cve.radiocsirt.org/vuln/ghsa-5c7f-3fp9-p3v4 <p>The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.</p> <p>The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.</p> https://cve.radiocsirt.org/vuln/ghsa-5c7f-3fp9-p3v4 https://cve.radiocsirt.org/vuln/gsd-2011-0904 gsd-2011-0904 https://cve.radiocsirt.org/vuln/gsd-2011-0904 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10047-1 <p>vino-3.22.0-1.1 on GA media</p> <p>vino-3.22.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10047-1 https://cve.radiocsirt.org/vuln/rhsa-2013:0169 <p>vino: Out of bounds read flaw by processing certain client raw encoding framebuffer update requests vino: Out of bounds read flaw by processing certain client tight encoding framebuffer update requests vino: vino-preferences incorrectly indicates that computer is only reachable over local network vino-preferences does not warn about UPnP especially with no password and no confirmation. vino: information leak and authentication bypass</p> <p>vino: Out of bounds read flaw by processing certain client raw encoding framebuffer update requests vino: Out of bounds read flaw by processing certain client tight encoding framebuffer update requests vino: vino-preferences incorrectly indicates that computer is only reachable over local network vino-preferences does not warn about UPnP especially with no password and no confirmation. vino: information leak and authentication bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2013:0169