Summary
Nicolas Ruff discovered that iTALC had buffer overflows, divide-by-zero errors
and didn't check malloc return values. A remote attacker could use these issues
to cause a denial of service or possibly execute arbitrary code.
(CVE-2014-6051, CVE-2014-6052, CVE-2014-6053, CVE-2014-6054, CVE-2014-6055)
Josef Gajdusek discovered that iTALC had heap-based buffer overflow
vulnerabilities. A remote attacker could used these issues to cause a denial of
service or possibly execute arbitrary code. (CVE-2016-9941, CVE-2016-9942)
It was discovered that iTALC had an out-of-bounds write, multiple heap
out-of-bounds writes, an infinite loop, improper initializations, and null
pointer vulnerabilities. A remote attacker could used these issues to cause a
denial of service or possibly execute arbitrary code. (CVE-2018-15127,
CVE-2018-20019, CVE-2018-20020, CVE-2018-20021, CVE-2018-20022, CVE-2018-20023,
CVE-2018-20024, CVE-2018-20748, CVE-2018-20749, CVE-2018-20750, CVE-2018-7225,
CVE-2019-15681)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | italc | 1:2.0.2+dfsg1-4ubuntu0.1 |
Vulnerabilities 19
-
Unscored —
Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC s…
-
Unscored —
The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain…
-
Unscored —
The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not prope…
-
Unscored —
The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote …
-
Unscored —
Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier all…
-
Unscored —
Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a…
-
Unscored —
Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a de…
-
Unscored —CVE-2018-15127 EPSS 15%
LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server …
-
Unscored —
LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities…
-
Unscored —
LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside str…
-
Unscored —
LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC cl…
-
Unscored —
LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vu…
-
Unscored —
LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC R…
-
Unscored —
LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that…
-
Unscored —
LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for…
-
Unscored —
LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-201…
-
Unscored —
LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-20…
-
Unscored —
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitiz…
-
Unscored —
LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, whic…
References
-
report
https://ubuntu.com/security/CVE-2014-6051
-
report
https://ubuntu.com/security/CVE-2014-6052
-
report
https://ubuntu.com/security/CVE-2014-6053
-
report
https://ubuntu.com/security/CVE-2014-6054
-
report
https://ubuntu.com/security/CVE-2014-6055
-
report
https://ubuntu.com/security/CVE-2016-9941
-
report
https://ubuntu.com/security/CVE-2016-9942
-
report
https://ubuntu.com/security/CVE-2018-7225
-
report
https://ubuntu.com/security/CVE-2018-15127
-
report
https://ubuntu.com/security/CVE-2018-20019
-
report
https://ubuntu.com/security/CVE-2018-20020
-
report
https://ubuntu.com/security/CVE-2018-20021
-
report
https://ubuntu.com/security/CVE-2018-20022
-
report
https://ubuntu.com/security/CVE-2018-20023
-
report
https://ubuntu.com/security/CVE-2018-20024
-
report
https://ubuntu.com/security/CVE-2018-20748
-
report
https://ubuntu.com/security/CVE-2018-20749
-
report
https://ubuntu.com/security/CVE-2018-20750
-
report
https://ubuntu.com/security/CVE-2019-15681