LI
Product
Libvncserver
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 7Medium 1Low 0
Watch
Add Libvncserver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-18922 | 9.8 | Jun 30 | It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames Affected: before 0.9.12 |
| CVE-2018-7225 | 9.8 | Feb 19 | An issue was discovered in LibVNCServer through 0.9.11 Affected: through 0.9.11 |
| CVE-2016-9942 | 9.8 | Dec 31 | Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute… Affected: 0.9.10 |
| CVE-2016-9941 | 9.8 | Dec 31 | Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute… Affected: through 0.9.10 |
| CVE-2026-32853 | 8.1 | Mar 24 | LibVNCServer UltraZip Encoding Heap Out-of-bounds Read Affected: before 0.9.15 |
| CVE-2026-32854 | 7.5 | Mar 24 | LibVNCServer httpd proxy NULL Pointer Dereference Affected: before 0.9.15 |
| CVE-2020-29260 | 7.5 | Sep 2 | libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup() Affected: 0.9.13 |
| CVE-2020-25708 | 7.5 | Nov 27 | A divide by zero issue was found to occur in libvncserver-0.9.12 Affected: 0.9.12 |
| CVE-2020-14400 | 7.5 | Jun 17 | An issue was discovered in LibVNCServer before 0.9.13 Affected: before 0.9.13 |
| CVE-2020-14399 | 7.5 | Jun 17 | An issue was discovered in LibVNCServer before 0.9.13 Affected: before 0.9.13 |
| CVE-2010-5304 | 7.5 | Feb 5 | A NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain ClientCutText message Affected: before 0.9.9 |
| CVE-2020-14401 | 6.5 | Jun 17 | An issue was discovered in LibVNCServer before 0.9.13 Affected: before 0.9.13 |
Showing 12