The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service (divide-by-zero error and server crash) via a zero value in the scaling factor in a (1) PalmVNCSetScaleFactor or (2) SetScale message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdenetwork-kdnssdUpgrade kdenetwork-krfbUpgrade kdenetwork-krdcUpgrade kdenetwork-kopeteUpgrade kdenetwork-kgetUpgrade libvncserver-develUpgrade kdenetwork-commonUpgrade kdenetwork-krfb-libsUpgrade kdenetwork-kopete-develUpgrade kdenetwork-kget-libsUpgrade kdenetwork-develUpgrade libvncserverUpgrade kdenetwork-kopete-libsUpgrade kdenetwork-krdc-libsUpgrade kdenetworkUpgrade kdenetwork-krdc-develUpgrade kdenetwork-fileshare-samba | Dec 1, 2016 | Oct 6, 2014 |
| Debian | — | Upgrade libvncserver | Jul 30, 2024 | Oct 6, 2014 |
| Freebsd | — | Upgrade libvncserver | Dec 10, 2025 | Oct 11, 2016 |
| Gentoo Linux | — | Upgrade net-libs/libvncserver. | Oct 30, 2017 | Oct 6, 2014 |
| Oracle_linux | — | Upgrade kdenetwork-commonUpgrade kdenetwork-krdc-libsUpgrade kdenetwork-kdnssdUpgrade kdenetworkUpgrade kdenetwork-kopete-libsUpgrade kdenetwork-krfbUpgrade libvncserverUpgrade kdenetwork-kopete-develUpgrade kdenetwork-krdc-develUpgrade kdenetwork-kget-libsUpgrade kdenetwork-krfb-libsUpgrade kdenetwork-kgetUpgrade libvncserver-develUpgrade kdenetwork-fileshare-sambaUpgrade kdenetwork-develUpgrade kdenetwork-krdcUpgrade kdenetwork-kopete | Oct 16, 2024 | Oct 6, 2014 |
| Suse | — | Upgrade libvncserver0Upgrade LibVNCServer-develUpgrade LibVNCServerUpgrade libvncclient0 | Dec 18, 2015 | Oct 6, 2014 |
| Ubuntu | — | Upgrade italc-clientUpgrade libvncserver0Upgrade italc-masterUpgrade libitalccore | Mar 22, 2023 | Oct 6, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub