https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:01:54 +0000 https://cve.radiocsirt.org/vuln/alsa-2020:3385 <p><strong>Affected:</strong> AlmaLinux:8: libvncserver-devel</p> <p>LibVNCServer is a C library that enables you to implement VNC server functionality into own programs.</p> <p>Security Fix(es):</p> <p>* libvncserver: websocket decoding buffer overflow (CVE-2017-18922)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libvncserver-devel</p> <p>LibVNCServer is a C library that enables you to implement VNC server functionality into own programs.</p> <p>Security Fix(es):</p> <p>* libvncserver: websocket decoding buffer overflow (CVE-2017-18922)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2020:3385 https://cve.radiocsirt.org/vuln/bdu:2020-03957 bdu:2020-03957 https://cve.radiocsirt.org/vuln/bdu:2020-03957 https://cve.radiocsirt.org/vuln/certfr-2021-avi-949 certfr-2021-avi-949 https://cve.radiocsirt.org/vuln/certfr-2021-avi-949 https://cve.radiocsirt.org/vuln/cnvd-2020-36778 cnvd-2020-36778 https://cve.radiocsirt.org/vuln/cnvd-2020-36778 https://cve.radiocsirt.org/vuln/euvd-2026-80667 EUVD-2026-80667 https://cve.radiocsirt.org/vuln/euvd-2026-80667 https://cve.radiocsirt.org/vuln/fkie_cve-2017-18922 <p>It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.</p> <p>It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-18922 https://cve.radiocsirt.org/vuln/ghsa-hq8f-cpqj-qph2 <p>It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.</p> <p>It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/ghsa-hq8f-cpqj-qph2 https://cve.radiocsirt.org/vuln/gsd-2017-18922 gsd-2017-18922 https://cve.radiocsirt.org/vuln/gsd-2017-18922 https://cve.radiocsirt.org/vuln/icsa-21-350-12 <p>websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow. LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution. LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete. LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete. LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete. An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function. LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a. A flaw was found in l…</p> <p>websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow. LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution. LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete. LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete. LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete. An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function. LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a. A flaw was found in l…</p> https://cve.radiocsirt.org/vuln/icsa-21-350-12 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0960-1 <p>Security update for LibVNCServer</p> <p>Security update for LibVNCServer</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0960-1 https://cve.radiocsirt.org/vuln/rhsa-2020:3456 <p>libvncserver: websocket decoding buffer overflow</p> <p>libvncserver: websocket decoding buffer overflow</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3456 https://cve.radiocsirt.org/vuln/suse-su-2020:1873-1 <p>Security update for LibVNCServer</p> <p>Security update for LibVNCServer</p> https://cve.radiocsirt.org/vuln/suse-su-2020:1873-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-18922 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: x11vnc, Ubuntu:16.04:LTS: libvncserver, Ubuntu:18.04:LTS: libvncserver, Ubuntu:20.04:LTS: libvncserver, Ubuntu:20.04:LTS: veyon, Ubuntu:22.04:LTS: veyon, Ubuntu:24.04:LTS: veyon, Ubuntu:25.10: veyon, Ubuntu:26.04:LTS: veyon</p> <p>It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: x11vnc, Ubuntu:16.04:LTS: libvncserver, Ubuntu:18.04:LTS: libvncserver, Ubuntu:20.04:LTS: libvncserver, Ubuntu:20.04:LTS: veyon, Ubuntu:22.04:LTS: veyon, Ubuntu:24.04:LTS: veyon, Ubuntu:25.10: veyon, Ubuntu:26.04:LTS: veyon</p> <p>It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-18922