Skip to content
OpenAdvisories

Package · Debian

neatvnc

2 known vulnerabilities.

2 results · Feed

  • High 8.1

    Neat VNC: Buffer overflow due to oversized RSA public keys

    Neat VNC is a VNC server library. Prior to 0.9.6, a pre-authentication stack buffer overflow exists in neatvnc in the RSA-AES security type handler. An unauthenticated remote attacker who can reach the VNC listening socket can send a crafted security type 5 (…

  • Critical 9.8

    server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type, a related issue to CVE-20…