CVE-2016-9942

Related Files

Gentoo Linux Security Advisory 201702-24

Posted Feb 21, 2017

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201702-24 - Multiple vulnerabilities have been found in LibVNCServer/LibVNCClient, the worst of which allows remote attackers to execute arbitrary code when connecting to a malicious server. Versions less than 0.9.11 are affected.

tags | advisory, remote, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2016-9941, CVE-2016-9942

SHA-256 | fb93b39ea7b4f80cb3bdec52ed16f6cc5abf7765ccfae9d37c0f7a995e295a71

Download | Favorite | View

Ubuntu Security Notice USN-3171-1

Posted Jan 11, 2017

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3171-1 - Josef Gajdusek discovered that the LibVNCServer client library incorrectly handled certain FrameBufferUpdate messages. If a user were tricked into connecting to a malicious server, an attacker could use this issue to cause a denial of service, or possibly execute arbitrary code.

tags | advisory, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2016-9941, CVE-2016-9942

SHA-256 | 8b1ac71d61ad7fcfdc77e67ed5cbdb743bca75ab32f33e96d0bf0214b29cb7d5

Download | Favorite | View

Debian Security Advisory 3753-1

Posted Jan 5, 2017

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3753-1 - It was discovered that libvncserver, a collection of libraries used to implement VNC/RFB clients and servers, incorrectly processed incoming network packets. This resulted in several heap-based buffer overflows, allowing a rogue server to either cause a DoS by crashing the client, or potentially execute arbitrary code on the client side.

tags | advisory, overflow, arbitrary

systems | linux, debian

advisories | CVE-2016-9941, CVE-2016-9942

SHA-256 | 3765364083eeb5d390903842e409e9207be323312ec2bce0e8e728b3ca2b7671

Download | Favorite | View