According to the versions of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Heap-based buffer overflow in ultra.c in LibVNCClient     in LibVNCServer before 0.9.11 allows remote servers to     cause a denial of service (application crash) or     possibly execute arbitrary code via a crafted     FramebufferUpdate message with the Ultra type tile,     such that the LZO payload decompressed length exceeds     what is specified by the tile     dimensions.(CVE-2016-9942)

  - It was discovered that websockets.c in LibVNCServer     prior to 0.9.12 did not properly decode certain     WebSocket frames. A malicious attacker could exploit     this by sending specially crafted WebSocket frames to a     server, causing a heap-based buffer     overflow.(CVE-2017-18922)

  - LibVNC commit before     d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a     memory leak (CWE-655) in VNC server code, which allow     an attacker to read stack memory and can be abused for     information disclosure. Combined with another     vulnerability, it can be used to leak stack memory and     bypass ASLR. This attack appear to be exploitable via     network connectivity. These vulnerabilities have been     fixed in commit     d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.(CVE-2019-1568     1)

  - A divide by zero issue was found to occur in     libvncserver-0.9.12. A malicious client could use this     flaw to send a specially crafted message that, when     processed by the VNC server, would lead to a floating     point exception, resulting in a denial of     service.(CVE-2020-25708)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:1811 advisory.

  - An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized     memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function. (CVE-2018-21247)

  - libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
    (CVE-2019-20839)

  - An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer     dereference. (CVE-2020-14397)

  - An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat     size. (CVE-2020-14405)

  - A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw     to send a specially crafted message that, when processed by the VNC server, would lead to a floating point     exception, resulting in a denial of service. (CVE-2020-25708)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3125 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3125-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     September 30, 2022                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libvncserver     Version        : 0.9.11+dfsg-1.3+deb10u5     CVE ID         : CVE-2020-25708 CVE-2020-29260


    Two issues have been found in libvncserver, a library to write one's own     VNC server.


    CVE-2020-25708

        Due to some missing checks, a divide by zero could happen, which could         result in a denial of service.

    CVE-2020-29260

        Due to a memory leak in function rfbClientCleanup() a remote attacker         might be able to cause a denial of service.



    For Debian 10 buster, these problems have been fixed in version     0.9.11+dfsg-1.3+deb10u5.

    We recommend that you upgrade your libvncserver packages.

    For the detailed security status of libvncserver please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libvncserver

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1811 advisory.

  - An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized     memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function. (CVE-2018-21247)

  - libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
    (CVE-2019-20839)

  - An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer     dereference. (CVE-2020-14397)

  - An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat     size. (CVE-2020-14405)

  - A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw     to send a specially crafted message that, when processed by the VNC server, would lead to a floating point     exception, resulting in a denial of service. (CVE-2020-25708)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1811 advisory.

    LibVNCServer is a C library that enables you to implement VNC server functionality into own programs.

    Security Fix(es):

    * libvncserver: uninitialized memory contents are vulnerable to Information Leak (CVE-2018-21247)

    * libvncserver: buffer overflow in ConnectClientToUnixSock() (CVE-2019-20839)

    * libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference (CVE-2020-14397)

    * libvncserver: libvncclient/rfbproto.c does not limit TextChat size (CVE-2020-14405)

    * libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS (CVE-2020-25708)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2098:01 advisory.

    * libvncserver: uninitialized memory contents are vulnerable to Information Leak (CVE-2018-21247)
      * libvncserver: buffer overflow in ConnectClientToUnixSock() (CVE-2019-20839)
      * libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference (CVE-2020-14397)
      * libvncserver: libvncclient/rfbproto.c does not limit TextChat size (CVE-2020-14405)
      * libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS (CVE-2020-25708)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw     to send a specially crafted message that, when processed by the VNC server, would lead to a floating point     exception, resulting in a denial of service. (CVE-2020-25708)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
146731	EulerOS 2.0 SP2 : libvncserver (EulerOS-SA-2021-1321)	Nessus	Huawei Local Security Checks	2021/2/22	2024/1/19	critical
157648	AlmaLinux 8 : libvncserver (ALSA-2021:1811)	Nessus	Alma Linux Local Security Checks	2022/2/9	2023/11/10	high
165593	Debian dla-3125 : libvncclient1 - security update	Nessus	Debian Local Security Checks	2022/9/30	2025/1/22	high
184742	Rocky Linux 8 : libvncserver (RLSA-2021:1811)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	high
149663	RHEL 8 : libvncserver (RHSA-2021:1811)	Nessus	Red Hat Local Security Checks	2021/5/19	2024/11/7	high
294004	MiracleLinux 8 : libvncserver-0.9.11-17.el8 (AXSA:2021-2098:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
229947	Linux Distros Unpatched Vulnerability : CVE-2020-25708	Nessus	Misc.	2025/3/5	2026/4/28	high

检测

插件搜索

critical

high

high

high

high

high

high