| Package | Affected versions | Patched versions |
|---|---|---|
| libvncserver | < 0.9.12 | 0.9.12 |
It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free