VDB

GCVE-VVD-MAGEIA-2017-27

GCVE-VVD-MAGEIA-2017-27
Advisory Published
Vulnetix · Advisory published July 13, 2017
It was discovered that there were two vulnerabilities in libvncserver, a library to create/embed a VNC server: A heap-based buffer overflow that allows remote servers to cause a denial of service via a crafted FramebufferUpdate message containing a subrectangle outside of the drawing area (CVE-2016-9941). A heap-based buffer overflow that allow remote servers to cause a denial of service via a crafted FramebufferUpdate message with the "Ultra" type tile such that the LZO decompressed payload exceeds the size of the tile dimensions (CVE-2016-9942).

Affected Products

VendorProductVersionsPlatforms
Mageialdetect-lst0 (affected), 0.1.346.6-1.mga5 (unaffected)
Mageianvidia-current0 (affected), 375.66-1.mga5.nonfree (unaffected)
Mageialibvncserver0 (affected), 0.9.10-1.2.mga5 (unaffected), 0 (affected), 0.9.10-1.2.mga5 (unaffected)

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›