The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvncserverUpgrade libvncserver-devel | Dec 1, 2016 | Sep 30, 2014 |
| Debian | — | Upgrade libvncserverUpgrade veyon | Jul 30, 2024 | Sep 30, 2014 |
| Freebsd | — | Upgrade libvncserver | Dec 10, 2025 | Oct 11, 2016 |
| Gentoo Linux | — | Upgrade net-libs/libvncserver.Upgrade net-misc/tigervnc. | Oct 30, 2017 | Sep 30, 2014 |
| Oracle Solaris | — | Upgrade consolidation/X/X-incorporation to version 0.5.11-0.175.3.0.0.30.1483 on Solaris 11.3Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3 | May 29, 2017 | Sep 30, 2014 |
| Oracle_linux | — | Upgrade libvncserverUpgrade libvncserver-devel | Oct 16, 2024 | Sep 30, 2014 |
| Suse | — | Upgrade LibVNCServerUpgrade libvncserver0Upgrade libvncclient0Upgrade LibVNCServer-devel | Dec 18, 2015 | Sep 30, 2014 |
| Ubuntu | — | Upgrade libvncserver0Upgrade italc-masterUpgrade italc-clientUpgrade libitalccore | Mar 22, 2023 | Sep 30, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub