{"id":"CVE-2014-6053","aliases":["DEBIAN-CVE-2014-6053","DLA-197-1","DLA-1979-1","DLA-2014-1","DLA-2045-1","DSA-3081-1","EUVD-2014-5941","GHSA-fcxc-59xc-c54c","MGASA-2014-0397","MGASA-2014-0432","MGASA-2014-0466","MGASA-2020-0242","RHSA-2014:1826","RHSA-2014:1827","SUSE-SU-2015:2088-1","SUSE-SU-2015:2088-2","SUSE-SU-2015:2110-1","UBUNTU-CVE-2014-6053","USN-2365-1","USN-4573-1","USN-4587-1"],"status":"published","title":"The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and...","description":"The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.07254,"percentile":0.94384,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-19"],"published":"2014-09-24T00:00:00Z","modified":"2026-10-23T15:47:34Z","fixes":[{"ecosystem":"Debian:12","package":"libvncserver","fixed_in":["0.9.9+dfsg-6.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvncserver","fixed_in":["0.9.9+dfsg-6.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvncserver","fixed_in":["0.9.9+dfsg-6.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"tightvnc","fixed_in":["1:1.3.9-9.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tightvnc","fixed_in":["1:1.3.9-9.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tightvnc","fixed_in":["1:1.3.9-9.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"vino","fixed_in":["3.22.0-6"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"krfb","fixed_in":["4:4.13.3-0ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libvncserver","fixed_in":["0.9.9+dfsg-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tightvnc","fixed_in":["1.3.9-6.5+deb8u1build0.14.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"italc","fixed_in":["1:2.0.2+dfsg1-4ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"vino","fixed_in":["3.8.1-0ubuntu9.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"vino","fixed_in":["3.22.0-3ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"vino","fixed_in":["3.22.0-5ubuntu2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9+dfsg-6.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9+dfsg-6.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9+dfsg-6.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.9-9.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.9-9.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.9-9.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"vino","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.0-6"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.7-2+deb6u1"}]}],"versions":["0.9.7-2"],"bundled":5},{"source":"osv","ecosystem":"Debian:8","package":"italc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.2+dfsg1-2+deb8u1"}]}],"versions":["1:2.0.2+dfsg1-2"],"bundled":21},{"source":"osv","ecosystem":"Debian:8","package":"vino","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.0-2+deb8u1"}]}],"versions":["3.14.0-2"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-6.5+deb8u1"}]}],"versions":["1.3.9-6.5"],"bundled":9},{"source":"osv","ecosystem":"Debian:7","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9+dfsg-1+deb7u1"}]}],"versions":["0.9.9+dfsg-1"],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-2.2.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:3","package":"remmina","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-3.2.mga3"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:4","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-3.2.mga4"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:4","package":"remmina","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-4.4.mga4"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:4","package":"akonadi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"amor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"analitza","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"blinken","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"bluedevil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-0.git20140216.1.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"bomber","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"bovo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"calligra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-1.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"cantor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"cervisia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"digikam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-3.2.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"dolphin-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"dragon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ffmpegthumbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"filelight","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"granatier","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"gwenview","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"jovie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"juk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kaccessible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kactivities","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kajongg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kalgebra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kalzium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kamera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kanagram","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kapman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kapptemplate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"katomic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kblackbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kblocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kbounce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kbreakout","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kbruch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kcachegrind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kcalc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kcharselect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kcolorchooser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kcron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kde-base-artwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kde-dev-scripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kde-dev-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kde-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kde-wallpapers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kde4-audiocd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdeartwork4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdebase4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdebase4-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdebase4-workspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdegraphics-mobipocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdegraphics-strigi-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdegraphics-thumbnailers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdelibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdenetwork-filesharing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdenetwork-strigi-analyzers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdepim4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdepim4-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdepimlibs4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdeplasma-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdesdk-kioslaves","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdesdk-strigi-analyzers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdesdk-thumbnailers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdewebdev4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdiamond","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kdnssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kfloppy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kfourinline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kgamma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kgeography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kgoldrunner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kgpg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"khangman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kigo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"killbots","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kimono","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kiriki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kiten","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kjumpingcube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"klettres","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"klickety","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"klines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kmag","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kmahjongg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kmines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kmix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kmousetool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kmouth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kmplot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"knavalbattle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"knetwalk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kolf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kollision","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kolourpaint","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kompare","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"konquest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"konsole","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kopete","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"korundum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kpat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kphotoalbum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4-2.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kppp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"krdc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kremotecontrol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kreversi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"krfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.2.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kross-interpreters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kruler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ksaneplugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kscd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kshisen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ksirk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ksnakeduel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ksnapshot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kspaceduel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ksquares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kstars","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ksudoku","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ksystemlog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kteatime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ktimer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ktouch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ktuberling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kturtle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ktux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kubrick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kwallet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"kwordquiz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"libbluedevil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0-0.git20140107.1.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"libkcddb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"libkcompactdisc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"libkdcraw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"libkdeedu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"libkdegames","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"libkexiv2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"libkipi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"libkmahjongg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"libkomparediff2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"libksane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"lokalize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"lskat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"mageia-kde4-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4-0.20140914.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"marble","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"mplayerthumbs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"nepomuk-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"nepomuk-widgets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"okteta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"okular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"oxygen-icon-theme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"pairs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"palapeli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"parley","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"perl-kde4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"perl-qt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"picmi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"polkit-qt-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.112.0-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"poxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"print-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"python-kde4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"qyoto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"rocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"ruby-qt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"smokegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"smokekde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"smokeqt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"step","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"superkaramba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"svgpart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"sweeper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"task-kde4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:4","package":"umbrello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.5-1.mga4"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:3","package":"kdenetwork4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.5-1.3.mga3"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:7","package":"vino","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.0-3.1.mga7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-7.el6_6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-7.el6_6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-7.el6_6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-7.el6_6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-7.el6_6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-7.el6_6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-7.el6_6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-7.el6_6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.7-7.el6_6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-9.el7_0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-9.el7_0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-9.el7_0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-9.el7_0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-9.el7_0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-9.el7_0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-9.el7_0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-9.el7_0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-9.el7_0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-kdnssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-kget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-kget-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-krdc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-krdc-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-krfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-krfb-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-fileshare-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-kopete","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-kopete-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-kopete-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"kdenetwork-krdc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-kdnssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-kget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-kget-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-kopete","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-kopete-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-kopete-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-krdc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-krdc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-krdc-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-krfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-krfb-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"kdenetwork-fileshare-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-kdnssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-kget","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-kget-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-kopete","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-kopete-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-kopete-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-krdc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-krdc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-krdc-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-krfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-krfb-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"kdenetwork-fileshare-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.10.5-8.el7_0"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-156.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-156.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-156.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-156.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-156.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-156.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-156.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-156.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.1-156.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"krfb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.13.3-0ubuntu1.1"}]}],"versions":["4:4.11.2-0ubuntu1","4:4.11.80-0ubuntu1","4:4.11.95-0ubuntu1","4:4.11.97-0ubuntu1","4:4.12.0-0ubuntu1","4:4.12.1-0ubuntu1","4:4.12.2-0ubuntu1","4:4.12.3-0ubuntu1","4:4.12.90-0ubuntu1","4:4.12.95-0ubuntu1","4:4.12.97-0ubuntu1","4:4.13.0-0ubuntu1","4:4.13.0-0ubuntu1.1","4:4.13.3-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9+dfsg-1ubuntu1.1"}]}],"versions":["0.9.9+dfsg-1","0.9.9+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-6.5+deb8u1build0.14.04.1~esm1"}]}],"versions":["1.3.9-6.4","1.3.9-6.4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"italc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.2+dfsg1-4ubuntu0.1"}]}],"versions":["1:2.0.2+dfsg1-3","1:2.0.2+dfsg1-4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"vino","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.1-0ubuntu9.3"}]}],"versions":["3.8.1-0ubuntu6","3.8.1-0ubuntu7","3.8.1-0ubuntu8","3.8.1-0ubuntu9","3.8.1-0ubuntu9.1","3.8.1-0ubuntu9.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.10-0ubuntu2","1.3.10-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vino","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.0-3ubuntu1.1"}]}],"versions":["3.8.1-0ubuntu12","3.22.0-2ubuntu1","3.22.0-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.10-0ubuntu3","1.3.10-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vino","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.0-5ubuntu2.1"}]}],"versions":["3.22.0-5ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.10-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.3.10-3","1:1.3.10-5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.3.10-7","1:1.3.10-7build1","1:1.3.10-7build2","1:1.3.10-8"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.3.10-9","1:1.3.10-10"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.3.10-10build1","1:1.3.10-11"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"tightvnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.3.10-10","1:1.3.10-10build1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9+dfsg-1ubuntu1.1"}]}],"versions":["0.9.9+dfsg-1","0.9.9+dfsg-1ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"vino","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.1-0ubuntu9.3"}]}],"versions":["3.8.1-0ubuntu6","3.8.1-0ubuntu7","3.8.1-0ubuntu8","3.8.1-0ubuntu9","3.8.1-0ubuntu9.1","3.8.1-0ubuntu9.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"vino","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.0-3ubuntu1.1"}]}],"versions":["3.8.1-0ubuntu12","3.22.0-2ubuntu1","3.22.0-3ubuntu1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"vino","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.0-5ubuntu2.1"}]}],"versions":["3.22.0-5ubuntu2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"italc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.2+dfsg1-4ubuntu0.1"}]}],"versions":["1:2.0.2+dfsg1-3","1:2.0.2+dfsg1-4"],"bundled":19}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"libvncserver","product":"libvncserver"}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2014-007.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource","advisory","report"]},{"url":"https://github.com/newsoft/libvncserver/commit/6037a9074d52b1963c97cb28ea1096c7c14cbf28","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"http://secunia.com/advisories/61682","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/61506","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/09/25/11","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://seclists.org/oss-sec/2014/q3/639","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article","report"]},{"url":"http://ubuntu.com/usn/usn-2365-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201507-07","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3081","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00032.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4573-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4587-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6053","tags":["advisory"]},{"url":"https://usn.ubuntu.com/4573-1"},{"url":"https://usn.ubuntu.com/4587-1"},{"url":"https://github.com/advisories/GHSA-fcxc-59xc-c54c"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-6053","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0397.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14155","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2014-0432.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13221","tags":["report"]},{"url":"https://www.kde.org/announcements/4.12","tags":["web"]},{"url":"https://www.kde.org/announcements/announce-4.12.1.php","tags":["web"]},{"url":"https://www.kde.org/announcements/announce-4.12.2.php","tags":["web"]},{"url":"https://www.kde.org/announcements/announce-4.12.3.php","tags":["web"]},{"url":"https://www.kde.org/announcements/announce-4.12.4.php","tags":["web"]},{"url":"https://www.kde.org/announcements/announce-4.12.5.php","tags":["web"]},{"url":"http://www.kde.org/info/security/advisory-20140618-1.txt","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-July/134961.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13545","tags":["report"]},{"url":"http://www.kde.org/info/security/advisory-20140730-1.txt","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-October/140293.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-September/137844.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13792","tags":["report"]},{"url":"http://www.kde.org/info/security/advisory-20140803-1.txt","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-August/136758.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13933","tags":["report"]},{"url":"https://www.kde.org/info/security/advisory-20140923-1.txt","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14205","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12612","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12751","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13618","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13728","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12982","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13275","tags":["report"]},{"url":"https://bugs.kde.org/show_bug.cgi?id=330174","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13292","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13300","tags":["report"]},{"url":"https://bugs.kde.org/show_bug.cgi?id=331761","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13531","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13555","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13559","tags":["report"]},{"url":"https://bugs.kde.org/show_bug.cgi?id=335001","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12008","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13778","tags":["report"]},{"url":"https://bugs.kde.org/show_bug.cgi?id=336835","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2014-0466.html","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0242.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25786","tags":["report"]},{"url":"https://www.debian.org/lts/security/2019/dla-2014","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1826","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144293","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1826.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6051","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6051","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6051","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6052","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6052","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6053","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6054","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6054","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6054","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-6055","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-6055","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6055","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1827","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2014-1826.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1827.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152088-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/854151","tags":["report"]},{"url":"https://bugzilla.suse.com/897031","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6055","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152088-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152110-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-6053","tags":["report"]},{"url":"http://www.kde.org/info/security/advisory-20140923-1.txt","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2365-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4573-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4587-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-6051","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6054","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-6055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-7225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15681","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-15127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20748","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20750","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-6053","description":"The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.","status":"published","published":"2014-12-15T17:27:00Z","modified":"2024-08-06T12:03:02.35Z","updated_at":"2026-11-02T14:33:45.263043Z"}],"euvd":[{"id":"EUVD-2014-5941","description":"The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.","status":"published","published":"2014-12-15T17:27:00Z","modified":"2024-08-06T12:03:02Z","updated_at":"2026-11-03T01:57:00.425792Z"}],"ghsa":[{"id":"GHSA-fcxc-59xc-c54c","title":"The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and...","description":"The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.","status":"published","published":"2022-05-13T01:14:20Z","modified":"2025-04-12T12:44:08Z","updated_at":"2026-11-02T15:01:20.346559Z"}],"nvd":[{"id":"CVE-2014-6053","description":"The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.","status":"published","published":"2014-12-15T18:59:05.643Z","modified":"2026-06-17T00:12:31.213Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-19"],"updated_at":"2026-11-02T14:02:57.680258Z"}],"osv":[{"id":"CVE-2014-6053","description":"The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.","status":"published","published":"2014-12-15T18:59:05Z","modified":"2026-04-16T06:15:55.746820108Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-6053","description":"The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.","status":"published","published":"2014-12-15T18:59:05.643Z","modified":"2026-10-23T15:47:34.029154335Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"DLA-197-1","title":"libvncserver - security update","status":"published","published":"2015-04-14T00:00:00Z","modified":"2026-03-09T01:23:10.156501Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-1979-1","title":"italc - security update","status":"published","published":"2019-10-30T00:00:00Z","modified":"2026-03-09T01:18:20.937176Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2014-1","title":"vino - security update","status":"published","published":"2019-11-29T00:00:00Z","modified":"2026-03-09T01:23:14.064857Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2045-1","title":"tightvnc - security update","status":"published","published":"2019-12-21T00:00:00Z","modified":"2026-03-09T01:19:55.474259Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-3081-1","title":"libvncserver - security update","status":"published","published":"2014-11-29T00:00:00Z","modified":"2026-03-09T01:20:34.019376Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0397","title":"Updated libvncserver \u0026 remmina packages fix security vulnerabilities","description":"Updated libvncserver and remmina packages fix security vulnerabilities:\n\nA malicious VNC server can trigger incorrect memory management handling by\nadvertising a large screen size parameter to the VNC client. This would result\nin multiple memory corruptions and could allow remote code execution on the\nVNC client (CVE-2014-6051, CVE-2014-6052).\n\nA malicious VNC client can trigger multiple DoS conditions on the VNC server\nby advertising a large screen size, ClientCutText message length and/or a zero\nscaling factor parameter (CVE-2014-6053, CVE-2014-6054).\n\nA malicious VNC client can trigger multiple stack-based buffer overflows by\npassing a long file and directory names and/or attributes (FileTime) when\nusing the file transfer message feature (CVE-2014-6055).\n\nThe remmina package had been built with a bundled copy of libvncserver.  It\nhas been rebuilt against the system libvncserver library to resolve these\nissues.\n","status":"published","published":"2014-10-07T09:22:51Z","modified":"2026-04-16T06:26:11.864650272Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0432","title":"Updated KDE 4 and related packages move to KDE 4.12.5","description":"This KDE 4 update provides an upgrade to the last stable version of KDE\nApplications and Development Platform for the 4.12 series, and updates\nPlasma Workspaces to 4.11.12.\n\nThis update fixes several security vulnerabilities\n  - KMail/KIO POP3 SSL MITM Flaw (CVE-2014-3494 - mga#13545)\n  - KAuth PID Reuse Flaw (CVE-2014-5033 - mga#13792)\n  - krfb: possible denial of service or code execution via integer\n    overflow (CVE-2014-4607 - mga#13933)\n  - krfb: multiple security issues in libvncserver (mga#14205)\n    (CVE-2014-6053, CVE-2014-6054, CVE-2014-6055)\n\nand additional issues\n  - poxml is compiled without antlr (mga#12612)\n  - crashes in bluedevil (mga#12751, mga#13618, mga#13728)\n  - kdelibs file dialog isn't properly translated in pure Qt apps\n    (mga#12982)\n  - kate: self-closing xml tag breaks indentation (mga#13275,\n    bko#330174)\n  - krdc missing dependency on freerdp (mga#13292)\n  - lock screen: can't start a new session after playing around\n    with buttons (mga#13300, bko#331761)\n  - kbreakout missing dependency on libkdegames-corebindings\n    (mga#13531)\n  - meinproc4 doesn't substitute entity with fixed libxml2\n    (mga#13555, mga#13559, bko#335001)\n  - calligra-words missing dependency on soprano-plugin-redland\n    (mga#12008)\n  - digikam can't export to flickr (mga#13778, bko#336835)\n\nSee the referenced buglists in KDE announcements for the complete list\nof fixes.\n","status":"published","published":"2014-10-29T11:30:40Z","modified":"2026-04-16T06:23:13.175454495Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0466","title":"Updated kdenetwork4 packages fix security vulnerabilities in krfb","description":"A malicious VNC client can trigger multiple DoS conditions on the VNC server\nby advertising a large screen size, ClientCutText message length and/or a zero\nscaling factor parameter (CVE-2014-6053, CVE-2014-6054).\n\nA malicious VNC client can trigger multiple stack-based buffer overflows by\npassing a long file and directory names and/or attributes (FileTime) when\nusing the file transfer message feature (CVE-2014-6055).\n\nThe krfb package is built with a bundled copy of libvncserver.\n","status":"published","published":"2014-11-21T12:44:16Z","modified":"2026-04-16T06:24:36.953632938Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2020-0242","title":"Updated vino packages fix security vulnerability","description":"Updated vino packages fix security vulnerabilities:\n\nThe rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in\nLibVNCServer did not properly handle attempts to send a large amount of\nClientCutText data, which allowed remote attackers to cause a denial of\nservice (memory consumption or daemon crash) via a crafted message that\nwas processed by using a single unchecked malloc (CVE-2014-6053).\n\nAn issue was discovered in LibVNCServer. rfbProcessClientNormalMessage()\nin rfbserver.c did not sanitize msg.cct.length, leading to access to\nuninitialized and potentially sensitive data or possibly unspecified other\nimpact (e.g., an integer overflow) via specially crafted VNC packets\n(CVE-2018-7225).\n\nLibVNC contained a memory leak in VNC server code, which allowed an\nattacker to read stack memory and could be abused for information\ndisclosure. Combined with another vulnerability, it could be used to\nleak stack memory and bypass ASLR. This attack appeared to be exploitable\nvia network connectivity (CVE-2019-15681).\n\nThe bundled libvncserver code in vino has been patched to fix these issues.\n","status":"published","published":"2020-06-10T21:39:20Z","modified":"2026-04-16T04:44:08.600140176Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"RHSA-2014:1826","title":"Red Hat Security Advisory: libvncserver security update","status":"published","published":"2024-09-15T22:09:13Z","modified":"2026-06-28T10:12:07Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1827","title":"Red Hat Security Advisory: kdenetwork security update","status":"published","published":"2024-09-15T22:09:08Z","modified":"2026-06-26T12:21:47.357549229Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:2088-1","title":"Security update for LibVNCServer","description":"The LibVNCServer package was updated to fix the following security issues:\n\n- bsc#897031: fix several security issues:\n  * CVE-2014-6051: Integer overflow in MallocFrameBuffer() on client side.\n  * CVE-2014-6052: Lack of malloc() return value checking on client side.\n  * CVE-2014-6053: Server crash on a very large ClientCutText message.\n  * CVE-2014-6054: Server crash when scaling factor is set to zero.\n  * CVE-2014-6055: Multiple stack overflows in File Transfer feature.\n- bsc#854151: Restrict the SSL cipher suite.\n","status":"published","published":"2015-12-30T13:04:03Z","modified":"2026-02-04T04:20:39.038219Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2088-2","title":"Security update for LibVNCServer","description":"The LibVNCServer package was updated to fix the following security issues:\n\n- bsc#897031: fix several security issues:\n  * CVE-2014-6051: Integer overflow in MallocFrameBuffer() on client side.\n  * CVE-2014-6052: Lack of malloc() return value checking on client side.\n  * CVE-2014-6053: Server crash on a very large ClientCutText message.\n  * CVE-2014-6054: Server crash when scaling factor is set to zero.\n  * CVE-2014-6055: Multiple stack overflows in File Transfer feature.\n- bsc#854151: Restrict the SSL cipher suite.\n","status":"published","published":"2015-12-30T13:04:00Z","modified":"2026-02-04T03:45:09.633482Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2110-1","title":"Security update for LibVNCServer","description":"The libvncserver package was updated to fix the following security issues:\n\n- bsc#897031: fix several security issues:\n  * CVE-2014-6051: Integer overflow in MallocFrameBuffer() on client side.\n  * CVE-2014-6052: Lack of malloc() return value checking on client side.\n  * CVE-2014-6053: Server crash on a very large ClientCutText message.\n  * CVE-2014-6054: Server crash when scaling factor is set to zero.\n  * CVE-2014-6055: Multiple stack overflows in File Transfer feature.\n","status":"published","published":"2015-11-26T10:47:31Z","modified":"2026-02-04T02:41:35.195704Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2014-6053","description":"The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.","status":"published","published":"2014-09-24T00:00:00Z","modified":"2026-10-17T12:52:41.188565136Z","updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"USN-2365-1","title":"libvncserver vulnerabilities","description":"Nicolas Ruff discovered that LibVNCServer incorrectly handled memory when\nbeing advertised large screen sizes by the server. If a user were tricked\ninto connecting to a malicious server, an attacker could use this issue to\ncause a denial of service, or possibly execute arbitrary code.\n(CVE-2014-6051, CVE-2014-6052)\n\nNicolas Ruff discovered that LibVNCServer incorrectly handled large\nClientCutText messages. A remote attacker could use this issue to cause a\nserver to crash, resulting in a denial of service. (CVE-2014-6053)\n\nNicolas Ruff discovered that LibVNCServer incorrectly handled zero scaling\nfactor values. A remote attacker could use this issue to cause a server to\ncrash, resulting in a denial of service. (CVE-2014-6054)\n\nNicolas Ruff discovered that LibVNCServer incorrectly handled memory in the\nfile transfer feature. A remote attacker could use this issue to cause a\nserver to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2014-6055)\n","status":"published","published":"2014-09-29T17:12:11Z","modified":"2026-04-27T15:17:30.842817532Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-4573-1","title":"vino vulnerabilities","description":"Nicolas Ruff discovered that Vino incorrectly handled large ClientCutText\nmessages. A remote attacker could use this issue to cause the server to\ncrash, resulting in a denial of service. (CVE-2014-6053)\n\nIt was discovered that Vino incorrectly handled certain packet lengths. A\nremote attacker could possibly use this issue to obtain sensitive\ninformation, cause a denial of service, or execute arbitrary code.\n(CVE-2018-7225)\n\nPavel Cheremushkin discovered that an information disclosure vulnerability\nexisted in Vino when sending a ServerCutText message. An attacker could\npossibly use this issue to expose sensitive information. (CVE-2019-15681)\n\nIt was discovered that Vino incorrectly handled region clipping. A remote\nattacker could possibly use this issue to cause Vino to crash, resulting in\na denial of service. (CVE-2020-14397)\n\nIt was discovered that Vino incorrectly handled encodings. A remote\nattacker could use this issue to cause Vino to crash, resulting in a denial\nof service, or possibly execute arbitrary code. (CVE-2020-14402,\nCVE-2020-14403, CVE-2020-14404)\n","status":"published","published":"2020-10-07T12:45:39Z","modified":"2026-04-27T15:43:30.812322Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4587-1","title":"italc vulnerabilities","description":"Nicolas Ruff discovered that iTALC had buffer overflows, divide-by-zero errors\nand didn't check malloc return values. A remote attacker could use these issues\nto cause a denial of service or possibly execute arbitrary code.\n(CVE-2014-6051, CVE-2014-6052, CVE-2014-6053, CVE-2014-6054, CVE-2014-6055)\n\nJosef Gajdusek discovered that iTALC had heap-based buffer overflow\nvulnerabilities. A remote attacker could used these issues to cause a denial of\nservice or possibly execute arbitrary code. (CVE-2016-9941, CVE-2016-9942)\n\nIt was discovered that iTALC had an out-of-bounds write, multiple heap\nout-of-bounds writes, an infinite loop, improper initializations, and null\npointer vulnerabilities. A remote attacker could used these issues to cause a\ndenial of service or possibly execute arbitrary code. (CVE-2018-15127,\nCVE-2018-20019, CVE-2018-20020, CVE-2018-20021, CVE-2018-20022, CVE-2018-20023,\nCVE-2018-20024, CVE-2018-20748, CVE-2018-20749, CVE-2018-20750, CVE-2018-7225,\nCVE-2019-15681)\n","status":"published","published":"2020-10-20T16:35:20Z","modified":"2026-04-27T15:48:42.890842055Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}