The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service (divide-by-zero error and server crash) via a zero value in the scaling factor in a (1) PalmVNCSetScaleFactor or (2) SetScale message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdenetwork-krfb-libsUpgrade kdenetwork-krdc-develUpgrade kdenetworkUpgrade kdenetwork-fileshare-sambaUpgrade kdenetwork-develUpgrade kdenetwork-kopete-libsUpgrade kdenetwork-kget-libsUpgrade kdenetwork-kopete-develUpgrade libvncserverUpgrade kdenetwork-krdc-libsUpgrade kdenetwork-kgetUpgrade kdenetwork-kopeteUpgrade libvncserver-develUpgrade kdenetwork-commonUpgrade kdenetwork-krfbUpgrade kdenetwork-kdnssdUpgrade kdenetwork-krdc | Dec 1, 2016 | Oct 6, 2014 |
| Debian | — | Upgrade libvncserver | Jul 30, 2024 | Oct 6, 2014 |
| Freebsd | — | Upgrade libvncserver | Dec 10, 2025 | Oct 11, 2016 |
| Gentoo Linux | — | Upgrade net-libs/libvncserver. | Oct 30, 2017 | Oct 6, 2014 |
| Oracle_linux | — | Upgrade kdenetwork-kget-libsUpgrade kdenetwork-krfbUpgrade kdenetworkUpgrade kdenetwork-krfb-libsUpgrade kdenetwork-kdnssdUpgrade libvncserverUpgrade kdenetwork-kopete-libsUpgrade kdenetwork-kopete-develUpgrade kdenetwork-krdc-develUpgrade kdenetwork-krdc-libsUpgrade kdenetwork-commonUpgrade kdenetwork-kgetUpgrade kdenetwork-krdcUpgrade kdenetwork-kopeteUpgrade kdenetwork-fileshare-sambaUpgrade libvncserver-develUpgrade kdenetwork-devel | Oct 16, 2024 | Oct 6, 2014 |
| Suse | — | Upgrade libvncserver0Upgrade LibVNCServerUpgrade libvncclient0Upgrade LibVNCServer-devel | Dec 18, 2015 | Oct 6, 2014 |
| Ubuntu | — | Upgrade italc-masterUpgrade libvncserver0Upgrade italc-clientUpgrade libitalccore | Mar 22, 2023 | Oct 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub