libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libvncserver: Multiple heap out-of-bound writes in VNC client code (Incomplete fix for CVE-2018-20019)     (CVE-2018-20748)

  - Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote     servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted     FramebufferUpdate message containing a subrectangle outside of the client drawing area. (CVE-2016-9941)

  - Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers     to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted     FramebufferUpdate message with the Ultra type tile, such that the LZO payload decompressed length exceeds     what is specified by the tile dimensions. (CVE-2016-9942)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libvncserver: Multiple heap out-of-bound writes in VNC client code (Incomplete fix for CVE-2018-20019)     (CVE-2018-20748)

  - LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write     vulnerabilities in VNC client code that can result remote code execution (CVE-2018-20019)

  - LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write     vulnerability inside structure in VNC client code that can result remote code execution (CVE-2018-20020)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The version of libvncserver installed on the remote host is prior to 0.9.9-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2170 advisory.

    libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
    (CVE-2020-29260)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4330-1 advisory.

  - libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
    (CVE-2020-29260)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3990-1 advisory.

  - libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
    (CVE-2020-29260)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3540-1 advisory.

  - libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
    (CVE-2020-29260)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3125 advisory.

  - A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw     to send a specially crafted message that, when processed by the VNC server, would lead to a floating point     exception, resulting in a denial of service. (CVE-2020-25708)

  - libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
    (CVE-2020-29260)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
199929	RHEL 7 : libvncserver (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199830	RHEL 8 : libvncserver (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
196328	RHEL 8 : libvncserver (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196314	RHEL 7 : libvncserver (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
178825	Amazon Linux 2 : libvncserver (ALAS-2023-2170)	Nessus	Amazon Linux Local Security Checks	high
168468	SUSE SLES12 Security Update : LibVNCServer (SUSE-SU-2022:4330-1)	Nessus	SuSE Local Security Checks	high
167649	SUSE SLED15 / SLES15 Security Update : LibVNCServer (SUSE-SU-2022:3990-1)	Nessus	SuSE Local Security Checks	high
165753	SUSE SLED15 / SLES15 Security Update : LibVNCServer (SUSE-SU-2022:3540-1)	Nessus	SuSE Local Security Checks	high
165593	Debian DLA-3125-1 : libvncserver - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-29260

high

Tenable Plugins

critical

critical

critical

critical

high

high

high

high

high