Most recent entries from all

ALSA-2021:1811 — Moderate: libvncserver security update

Affected: AlmaLinux:8: libvncserver, AlmaLinux:8: libvncserver-devel

LibVNCServer is a C library that enables you to implement VNC server functionality into own programs.

Security Fix(es):

* libvncserver: uninitialized memory contents are vulnerable to Information Leak (CVE-2018-21247)

* libvncserver: buffer overflow in ConnectClientToUnixSock() (CVE-2019-20839)

* libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference (CVE-2020-14397)

* libvncserver: libvncclient/rfbproto.c does not limit TextChat size (CVE-2020-14405)

* libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS (CVE-2020-25708)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-03737

EUVD-2026-45724

fkie_cve-2020-25708

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.

GHSA-3xcq-6vjj-wqx7

gsd-2020-25708

openSUSE-SU-2020:2025-1 — Security update for LibVNCServer

Security update for LibVNCServer

SUSE-SU-2020:14549-1 — Security update for LibVNCServer

Security update for LibVNCServer

UBUNTU-CVE-2020-25708

Affected: Ubuntu:Pro:14.04:LTS: tightvnc, Ubuntu:14.04:LTS: x11vnc, Ubuntu:16.04:LTS: libvncserver, Ubuntu:16.04:LTS: vino, Ubuntu:16.04:LTS: italc, Ubuntu:16.04:LTS: tightvnc, Ubuntu:18.04:LTS: libvncserver, Ubuntu:18.04:LTS: vino, Ubuntu:18.04:LTS: italc, Ubuntu:18.04:LTS: tightvnc and 14 more