PatchTheCVElibvnc project vulnerabilities
Recent CVEs affecting libvnc project products. 11 tracked.
libvnc project has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 11. Most recent: 2020-06-17. Highest priority: CVE-2019-20788 (score 70/100).
- CVE-2020-14405 MEDIUM 6.5 UPGRADE MITIGATE An issue was discovered in LibVNCServer before 0.9.13
- CVE-2020-14404 MEDIUM 5.4 UPGRADE MITIGATE An issue was discovered in LibVNCServer before 0.9.13
- CVE-2020-14403 MEDIUM 5.4 UPGRADE MITIGATE An issue was discovered in LibVNCServer before 0.9.13
- CVE-2020-14402 MEDIUM 5.4 UPGRADE MITIGATE An issue was discovered in LibVNCServer before 0.9.13
- CVE-2020-14398 HIGH 7.5 UPGRADE MITIGATE An issue was discovered in LibVNCServer before 0.9.13
- CVE-2020-14397 HIGH 7.5 UPGRADE MITIGATE An issue was discovered in LibVNCServer before 0.9.13
- CVE-2020-14396 HIGH 7.5 UPGRADE MITIGATE An issue was discovered in LibVNCServer before 0.9.13
- CVE-2019-20840 HIGH 7.5 UPGRADE MITIGATE An issue was discovered in LibVNCServer before 0.9.13
- CVE-2019-20839 HIGH 7.5 UPGRADE MITIGATE libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
- CVE-2019-20788 CRITICAL 9.8 UPGRADE MITIGATE libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based b
- CVE-2018-21247 HIGH 7.5 UPGRADE MITIGATE An issue was discovered in LibVNCServer before 0.9.13
FAQ
How do I fix libvnc project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libvnc project being exploited right now?
None of the tracked libvnc project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libvnc project CVE should I patch first?
CVE-2019-20788 currently ranks highest (70/100): libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based b.