pkg:Debian/tightvnc

All known vulnerabilities

• CRITICAL9.8CVE-2019-8287TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution.
  from 0, < 1:1.3.9-9.1
• CRITICAL9.8CVE-2019-15679TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution.
  from 0, < 1:1.3.9-9.1
• CRITICAL9.8CVE-2019-15678TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution..
  from 0, < 1:1.3.9-9.1
• CRITICAL9.8CVE-2018-7225libvncserver - security update
  from 0, < 1:1.3.9-9.1
• HIGH7.5CVE-2019-15681libvncserver - security update
  from 0, < 1:1.3.9-9.1
• HIGH7.5CVE-2019-15680TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS).
  from 0, < 1:1.3.9-9.1
• HIGH7.5CVE-2018-20022LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC c…
  from 0, < 1:1.3.9-9.1
• HIGH7.5CVE-2018-20021LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code.
  from 0, < 1:1.3.9-9.1
• —CVE-2014-6053tightvnc - security update
  from 0, < 1.3.9-6.5+deb8u1
• —CVE-2014-6053tightvnc - security update
  from 0, < 1:1.3.9-9.1
• —CVE-2002-1336TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authenticat…
  from 0, < 1.2.6-1