Libvncserver
Approved changes feed: RSS · Atom
cpe:2.3:a:libvncserver_project:libvncserver:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Libvncserver Project (b9d643de-7065-541d-ac69-e980235e99d1) |
|---|---|
| Product | Libvncserver (46e6822c-046e-5a28-aa76-248bf8c9ea66) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/libvnc/libvncserver |
purl2cpe | 2026-06-01 10:14:40.494429 |
pkg:rpm/centos/libvncserver |
purl2cpe | 2026-06-01 10:14:40.494431 |
pkg:rpm/fedora/libvncserver |
purl2cpe | 2026-06-01 10:14:40.494432 |
pkg:rpm/opensuse/libvncserver |
purl2cpe | 2026-06-01 10:14:40.494434 |
pkg:sourceforge/libvncserver |
purl2cpe | 2026-06-01 10:14:40.494435 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-32854 |
vulnerable | 2026-06-08 07:57:18.201666 |
LibVNCServer httpd proxy NULL Pointer Dereference
LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit missing validation of strchr() return values in the CONNECT and GET proxy handling paths to trigger null pointer dereferences and crash the server when httpd and proxy features are enabled.
Published: 2026-03-24T17:31:32.011Z
Updated: 2026-11-08T14:02:00.977Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32853 |
vulnerable | 2026-06-08 07:57:18.201099 |
LibVNCServer UltraZip Encoding Heap Out-of-bounds Read
LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or application crash. Attackers can exploit improper bounds checking in the HandleUltraZipBPP() function by manipulating subrectangle header counts to read beyond the allocated heap buffer.
Published: 2026-03-24T17:30:40.061Z
Updated: 2026-11-08T14:02:00.136Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14401 |
vulnerable | 2026-06-08 05:19:23.277137 |
Details available
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.
Published: 2020-06-17T15:12:41.000Z
Updated: 2024-08-04T12:46:34.914Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14400 |
vulnerable | 2026-06-08 05:19:23.276124 |
Details available
An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary
Published: 2020-06-17T15:12:50.000Z
Updated: 2024-08-04T12:46:34.597Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14399 |
vulnerable | 2026-06-08 05:19:23.275112 |
Details available
An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed.
Published: 2020-06-17T15:12:57.000Z
Updated: 2024-08-04T12:46:34.416Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7225 |
vulnerable | 2026-06-08 05:12:03.307802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18922 |
vulnerable | 2026-06-08 05:09:12.721971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9941 |
vulnerable | 2026-06-08 05:08:25.091027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5304 |
vulnerable | 2026-06-08 04:56:32.702315 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.