PatchTheCVElibvncserver vulnerabilities
Recent CVEs affecting libvncserver products. 5 tracked.
libvncserver has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2014-12-15. Highest priority: CVE-2014-6052 (score 60/100).
- CVE-2014-6055 MEDIUM 6.5 MITIGATE MITIGATE Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and ea
- CVE-2014-6054 MEDIUM 4.3 UPGRADE MITIGATE The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allow
- CVE-2014-6053 MEDIUM 5.0 UPGRADE MITIGATE The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does
- CVE-2014-6052 HIGH 7.5 UPGRADE MITIGATE The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not chec
- CVE-2014-6051 HIGH 7.5 MITIGATE MITIGATE Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows rem
FAQ
How do I fix libvncserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libvncserver being exploited right now?
None of the tracked libvncserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libvncserver CVE should I patch first?
CVE-2014-6052 currently ranks highest (60/100): The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not chec.