CVE-2020-14399

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html · Mailing List
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• LibVNC/libvncserver commit 23e5cbe · Patch
• LibVNC/libvncserver · Release Notes
• lists.debian.org/debian-lts-announce/2020/06/msg00035.html · Mailing List
• lists.debian.org/debian-lts-announce/2020/08/msg00045.html · Mailing List
• usn.ubuntu.com/4434-1 · Third Party Advisory

libvncserver のその他の脆弱性

• CVE-2026-32854高 7.5LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers…
• CVE-2026-32853高 8.1LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding ha…
• CVE-2020-29260高 7.5libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
• CVE-2020-25708高 7.5A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message…
• CVE-2017-18922緊急 9.8It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker c…