Moderate: libvncserver security update (Oracle Linux 8)

Summary

Fixed packages 2

Vulnerabilities 5

• Unscored —
  CVE-2018-21247

  An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) …

  libvncserver libvncserver x11vnc veyon Debian Ubuntu
  Jun 17, 2020
• Unscored —
  CVE-2019-20839

  libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.

  libvncserver libvncserver x11vnc veyon Debian Ubuntu Alpine
  Jun 17, 2020
• Unscored —
  CVE-2020-14397

  An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.

  libvncserver libvncserver x11vnc veyon Debian Ubuntu Alpine
  Jun 17, 2020
• Unscored —
  CVE-2020-14405

  An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.

  libvncserver libvncserver x11vnc veyon Debian Ubuntu Alpine
  Jun 17, 2020
• Unscored —
  CVE-2020-25708

  A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a spec…

  libvncserver libvncserver x11vnc italc Debian Ubuntu Alpine
  Nov 27, 2020