Vulnerabilities > Debian > Debian Linux > High

DATE CVE VULNERABILITY TITLE RISK
2020-06-17 CVE-2020-14400 An issue was discovered in LibVNCServer before 0.9.13. 7.5
2020-06-17 CVE-2020-14399 An issue was discovered in LibVNCServer before 0.9.13. 7.5
2020-06-17 CVE-2020-14398 Infinite Loop vulnerability in multiple products
An issue was discovered in LibVNCServer before 0.9.13.
7.5
2020-06-17 CVE-2020-14397 NULL Pointer Dereference vulnerability in multiple products
An issue was discovered in LibVNCServer before 0.9.13.
7.5
2020-06-17 CVE-2020-14396 NULL Pointer Dereference vulnerability in multiple products
An issue was discovered in LibVNCServer before 0.9.13.
network
low complexity
libvnc-project canonical debian siemens CWE-476
7.5
2020-06-17 CVE-2019-20840 Out-of-bounds Write vulnerability in multiple products
An issue was discovered in LibVNCServer before 0.9.13.
7.5
2020-06-17 CVE-2019-20839 Classic Buffer Overflow vulnerability in multiple products
libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
7.5
2020-06-17 CVE-2018-21247 Missing Initialization of Resource vulnerability in multiple products
An issue was discovered in LibVNCServer before 0.9.13.
7.5
2020-06-16 CVE-2020-14195 Deserialization of Untrusted Data vulnerability in multiple products
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).
network
high complexity
fasterxml netapp debian oracle CWE-502
8.1
2020-06-15 CVE-2020-14148 Out-of-bounds Read vulnerability in multiple products
The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.
network
low complexity
barton debian fedoraproject CWE-125
7.5