Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:libvnc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductLibvnc (3ec38e0a-3c85-5d1d-bab6-4075cfe0a111)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6307 vulnerable 2026-06-08 05:11:53.564931 Details available
LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution.
Published: 2018-12-19T16:00:00.000Z
Updated: 2024-08-05T06:01:48.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20024 vulnerable 2026-06-08 05:11:26.553711 Details available
LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS.
Published: 2018-12-19T16:00:00.000Z
Updated: 2024-08-05T11:51:18.329Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20023 vulnerable 2026-06-08 05:11:26.552853 Details available
LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak stack memory layout and in bypassing ASLR
Published: 2018-12-19T16:00:00.000Z
Updated: 2024-08-05T11:51:18.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20022 vulnerable 2026-06-08 05:11:26.551854 Details available
LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak stack memory layout and in bypassing ASLR
Published: 2018-12-19T16:00:00.000Z
Updated: 2024-08-05T11:51:18.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20021 vulnerable 2026-06-08 05:11:26.550800 Details available
LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker to consume excessive amount of resources like CPU and RAM
Published: 2018-12-19T16:00:00.000Z
Updated: 2024-08-05T11:51:18.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20020 vulnerable 2026-06-08 05:11:26.550143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20019 vulnerable 2026-06-08 05:11:26.533847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15127 vulnerable 2026-06-08 05:10:53.812975 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15126 vulnerable 2026-06-08 05:10:53.811475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.