CVE-2014-8240
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and...
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.
- Record
CVE-2014-8240- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.
- Record
CVE-2014-8240- Updated
- 2026-11-02
EUVDEUVD-2014-8081 No score
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.
- Record
EUVD-2014-8081- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5qgx-8v4m-83gf No score
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and...
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.
- Record
GHSA-5qgx-8v4m-83gf- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.
- Record
CVE-2014-8240- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-8240 No score
Integer overflow in TigerVNC allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to screen size handling, which triggers a heap-based buffer overflow, a similar issue to CVE-2014-6051.
- Record
DEBIAN-CVE-2014-8240- Updated
- 2026-11-02
OSVMGASA-2015-0459 No score
Updated tigervnc packages fix security vulnerabilities
Updated tigervnc packages fix security vulnerabilities:
An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way TigerVNC handled screen sizes. A malicious VNC server could use this flaw to cause a client to crash or, potentially, execute arbitrary code on the client (CVE-2014-8240).
A NULL pointer dereference flaw was found in TigerVNC's XRegion. A malicious VNC server could use this flaw to cause a client to crash (CVE-2014-8241).
- Record
MGASA-2015-0459- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10056-1 No score
libXvnc-devel-1.7.0-2.1 on GA media
These are all security issues fixed in the libXvnc-devel-1.7.0-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10056-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tigervncDebian:12 |
before 1.7.0-1 | 1.7.0-1 |
tigervncDebian:13 |
before 1.7.0-1 | 1.7.0-1 |
tigervncDebian:14 |
before 1.7.0-1 | 1.7.0-1 |
tigervncMageia:5 From an advisory covering 2 CVEs |
before 1.3.1-6.1.mga5 | 1.3.1-6.1.mga5 |
tigervnc-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-appletRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-moduleRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervncRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-iconsRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-licenseRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tigervnc-serverRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-minimalRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervncRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-iconsRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-serverRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-appletRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-moduleRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-licenseRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-minimalRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-appletRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-moduleRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervncRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-iconsRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-licenseRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-serverRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-minimalRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-appletRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-moduleRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervncRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-iconsRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-licenseRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-serverRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervnc-server-minimalRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.3.1-3.el7 | 0:1.3.1-3.el7 |
tigervncopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 1.7.0-2.1 | 1.7.0-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-8240 is a high vulnerability (CVSS 7.5) in Tigervnc, published October 16, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.55%, the 89th percentile. Fixed in tigervnc 1.7.0-1.
References
bugzilla.redhat.com/show_bug.cgi?id=1151307
seclists.org/oss-sec/2014/q4/278
security.gentoo.org/glsa/201612-36
oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
exchange.xforce.ibmcloud.com/vulnerabilities/96947
securityfocus.com/bid/70391
Show 28 moreShow less
nvd.nist.gov/vuln/detail/CVE-2014-8240
github.com/advisories/GHSA-5qgx-8v4m-83gf
security-tracker.debian.org/tracker/CVE-2014-8240
advisories.mageia.org/MGASA-2015-0459.html
bugs.mageia.org/show_bug.cgi?id=17190
rhn.redhat.com/errata/RHSA-2015-2233.html
access.redhat.com/errata/RHSA-2015:2233
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2233.json
cve.org/CVERecord?id=CVE-2014-8240
suse.com/security/cve/CVE-2014-0011