Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvncserverUpgrade libvncserver-devel | Dec 1, 2016 | Sep 30, 2014 |
| Debian | — | Upgrade libvncserverUpgrade veyon | Jul 30, 2024 | Sep 30, 2014 |
| Freebsd | — | Upgrade libvncserver | Dec 10, 2025 | Oct 11, 2016 |
| Gentoo Linux | — | Upgrade net-libs/libvncserver.Upgrade net-misc/tigervnc. | Oct 30, 2017 | Sep 30, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade consolidation/X/X-incorporation to version 0.5.11-0.175.3.0.0.30.1483 on Solaris 11.3 | May 29, 2017 | Sep 30, 2014 |
| Oracle_linux | — | Upgrade libvncserver-develUpgrade libvncserver | Oct 16, 2024 | Sep 30, 2014 |
| Suse | — | Upgrade LibVNCServerUpgrade libvncserver0Upgrade LibVNCServer-develUpgrade libvncclient0 | Dec 18, 2015 | Sep 30, 2014 |
| Ubuntu | — | Upgrade libitalccoreUpgrade italc-clientUpgrade libvncserver0Upgrade italc-master | Mar 22, 2023 | Sep 30, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub