Known vulnerabilities in libvncserver1 (Ubuntu package)

Vendor: Canonical Ltd.
Software: libvncserver1 (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:libvncserver1_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 31
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libvncserver1 (Ubuntu package) libvncserver1 (Ubuntu package) is affected by 31 known vulnerabilities: 14 high, 9 medium, 8 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48699 - Divide By Zero
CVE-2020-25708		 CWE-369 Medium
No
No
 0.9.10+dfsg-3ubuntu0.16.04.6, 0.9.11+dfsg-1ubuntu1.4, 0.9.12+dfsg-9ubuntu0.3 27.11.2020 SB2020112719
SB2020112928
SB2021052205
and 1 more
#VU30157 - Out-of-bounds write
CVE-2017-18922		 CWE-787 High
No
No
 0.9.10+dfsg-3ubuntu0.16.04.4, 0.9.11+dfsg-1.3ubuntu0.1, 0.9.11+dfsg-1ubuntu1.2, 0.9.12+dfsg-9ubuntu0.1 30.06.2020 SB2020071704
SB2020071801
SB2020071807
and 11 more
#VU29385 - Integer overflow
CVE-2019-20788		 CWE-190 Medium
No
No
 0.9.10+dfsg-3ubuntu0.16.04.4, 0.9.11+dfsg-1.3ubuntu0.1, 0.9.11+dfsg-1ubuntu1.2, 0.9.12+dfsg-9ubuntu0.1 30.06.2020 SB2020063001
SB2020051150
SB2021121649
and 1 more
#VU29383 - NULL Pointer Dereference
CVE-2020-14396		 CWE-476 Low
No
No
 0.9.12+dfsg-9ubuntu0.2 30.06.2020 SB2020063001
SB2021121649
SB2020072364
#VU29382 - NULL Pointer Dereference
CVE-2020-14397		 CWE-476 Medium
No
No
 0.9.10+dfsg-3ubuntu0.16.04.5, 0.9.11+dfsg-1ubuntu1.3, 0.9.12+dfsg-9ubuntu0.2 30.06.2020 SB2020063001
SB2020071807
SB2020072117
and 5 more
#VU29381 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-14398		 CWE-835 Medium
No
No
 0.9.10+dfsg-3ubuntu0.16.04.5, 0.9.11+dfsg-1ubuntu1.3, 0.9.12+dfsg-9ubuntu0.2 30.06.2020 SB2020063001
SB2020071807
SB2020072117
and 3 more
#VU29380 - Exposure of sensitive information to an unauthorized actor
CVE-2020-14399		 CWE-200 Low
No
No
 0.9.10+dfsg-3ubuntu0.16.04.5, 0.9.11+dfsg-1ubuntu1.3, 0.9.12+dfsg-9ubuntu0.2 30.06.2020 SB2020063001
SB2020071807
SB2020072117
and 3 more
#VU29379 - Exposure of sensitive information to an unauthorized actor
CVE-2020-14400		 CWE-200 Low
No
No
 0.9.10+dfsg-3ubuntu0.16.04.5, 0.9.11+dfsg-1ubuntu1.3, 0.9.12+dfsg-9ubuntu0.2 30.06.2020 SB2020063001
SB2020071807
SB2020072117
and 3 more
#VU29378 - Integer overflow
CVE-2020-14401		 CWE-190 High
No
No
 0.9.10+dfsg-3ubuntu0.16.04.5, 0.9.11+dfsg-1ubuntu1.3, 0.9.12+dfsg-9ubuntu0.2 30.06.2020 SB2020063001
SB2020071807
SB2020072117
and 4 more
#VU29377 - Memory corruption
CVE-2020-14402		 CWE-119 High
No
No
 0.9.10+dfsg-3ubuntu0.16.04.5, 0.9.11+dfsg-1ubuntu1.3, 0.9.12+dfsg-9ubuntu0.2 30.06.2020 SB2020063001
SB2020071807
SB2020072117
and 4 more
#VU29376 - Memory corruption
CVE-2020-14403		 CWE-119 High
No
No
 0.9.10+dfsg-3ubuntu0.16.04.5, 0.9.11+dfsg-1ubuntu1.3, 0.9.12+dfsg-9ubuntu0.2 30.06.2020 SB2020063001
SB2020061408
SB2021121649
and 1 more
#VU29375 - Memory corruption
CVE-2020-14404		 CWE-119 High
No
No
 0.9.10+dfsg-3ubuntu0.16.04.5, 0.9.11+dfsg-1ubuntu1.3, 0.9.12+dfsg-9ubuntu0.2 30.06.2020 SB2020063001
SB2020061409
SB2021121649
and 1 more
#VU29374 - Allocation of Resources Without Limits or Throttling
CVE-2020-14405		 CWE-770 Medium
No
No
 0.9.10+dfsg-3ubuntu0.16.04.5, 0.9.11+dfsg-1ubuntu1.3, 0.9.12+dfsg-9ubuntu0.2 30.06.2020 SB2020063001
SB2020061410
SB2021052205
and 2 more
#VU29373 - Memory corruption
CVE-2019-20839		 CWE-119 Medium
No
No
 0.9.10+dfsg-3ubuntu0.16.04.5, 0.9.11+dfsg-1ubuntu1.3, 0.9.12+dfsg-9ubuntu0.2 30.06.2020 SB2020063001
SB2020071807
SB2020072117
and 7 more
#VU29372 - Memory corruption
CVE-2019-20840		 CWE-119 Medium
No
No
 0.9.10+dfsg-3ubuntu0.16.04.5, 0.9.11+dfsg-1ubuntu1.3 30.06.2020 SB2020063001
SB2020071807
SB2020072117
and 5 more
#VU26343 - Heap-based Buffer Overflow
CVE-2019-15690		 CWE-122 High
No
No
 0.9.10+dfsg-3ubuntu0.16.04.4, 0.9.11+dfsg-1.3ubuntu0.1, 0.9.11+dfsg-1ubuntu1.2, 0.9.12+dfsg-9ubuntu0.1 24.03.2020 SB2020032410
SB2020032524
SB2020032610
and 5 more
#VU22957 - Missing release of memory after effective lifetime
CVE-2019-15681		 CWE-401 Medium
No
No
 0.9.10+dfsg-3ubuntu0.16.04.4, 0.9.11+dfsg-1ubuntu1.2, 0.9.11+dfsg-1.3ubuntu0.1, 0.9.12+dfsg-9ubuntu0.1 25.11.2019 SB2019102921
SB2020072605
SB2020051150
and 4 more
#VU22438 - NULL Pointer Dereference
CVE-2019-15680		 CWE-476 Medium
No
No
 0.9.10+dfsg-3ubuntu0.16.04.4, 0.9.11+dfsg-1.3ubuntu0.1, 0.9.11+dfsg-1ubuntu1.2, 0.9.12+dfsg-9ubuntu0.1 31.10.2019 SB2019103107
SB2020070189
#VU16962 - Use After Free
CVE-2018-15126		 CWE-416 High
No
No
 0.9.10+dfsg-3ubuntu0.16.04.3, 0.9.11+dfsg-1ubuntu1.1, 0.9.11+dfsg-1.1ubuntu0.1 14.01.2019 SB2018121911
SB2019011812
SB2019020408
and 1 more
#VU11221 - Integer overflow
CVE-2018-7225		 CWE-190 Low
No
No
 0.9.10+dfsg-3ubuntu0.16.04.2, 0.9.11+dfsg-1ubuntu0.1 21.03.2018 SB2018021801
SB2018032705
SB2018033001
and 9 more


Showing elements 1 - 20 out of 31