The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service (divide-by-zero error and server crash) via a zero value in the scaling factor in a (1) PalmVNCSetScaleFactor or (2) SetScale message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kdenetwork-krdcUpgrade kdenetwork-kgetUpgrade libvncserver-develUpgrade kdenetwork-krfbUpgrade kdenetwork-kdnssdUpgrade kdenetwork-kopeteUpgrade kdenetwork-commonUpgrade kdenetwork-kopete-libsUpgrade kdenetwork-krdc-develUpgrade kdenetwork-fileshare-sambaUpgrade libvncserverUpgrade kdenetwork-krfb-libsUpgrade kdenetworkUpgrade kdenetwork-krdc-libsUpgrade kdenetwork-kopete-develUpgrade kdenetwork-develUpgrade kdenetwork-kget-libs | Dec 1, 2016 | Oct 6, 2014 |
| Debian | — | Upgrade libvncserver | Jul 30, 2024 | Oct 6, 2014 |
| Freebsd | — | Upgrade libvncserver | Dec 10, 2025 | Oct 11, 2016 |
| Gentoo Linux | — | Upgrade net-libs/libvncserver. | Oct 30, 2017 | Oct 6, 2014 |
| Oracle_linux | — | Upgrade kdenetwork-krdc-develUpgrade kdenetwork-kopete-develUpgrade kdenetwork-krdc-libsUpgrade kdenetworkUpgrade kdenetwork-kopete-libsUpgrade kdenetwork-commonUpgrade kdenetwork-kget-libsUpgrade libvncserverUpgrade kdenetwork-krfbUpgrade kdenetwork-kdnssdUpgrade kdenetwork-krfb-libsUpgrade kdenetwork-fileshare-sambaUpgrade kdenetwork-kopeteUpgrade kdenetwork-develUpgrade kdenetwork-kgetUpgrade libvncserver-develUpgrade kdenetwork-krdc | Oct 16, 2024 | Oct 6, 2014 |
| Suse | — | Upgrade libvncserver0Upgrade LibVNCServer-develUpgrade LibVNCServerUpgrade libvncclient0 | Dec 18, 2015 | Oct 6, 2014 |
| Ubuntu | — | Upgrade libitalccoreUpgrade italc-masterUpgrade italc-clientUpgrade libvncserver0 | Mar 22, 2023 | Oct 6, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub