CVE-2016-9942
Fixed in a distro release EPSS 4%
Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted FramebufferUpdate message with the Ultra type tile, such that the LZO payload decompressed length exceeds what is specified by the tile dimensions.
Products: libvncserver_project libvncserver
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | libvncserver | 0.9.11-r0 |
| Alpine 3.11 | libvncserver | 0.9.11-r0 |
| Alpine 3.2 | libvncserver | 0.9.10-r2 |
| Alpine 3.3 | libvncserver | 0.9.10-r2 |
| Alpine 3.4 | libvncserver | 0.9.10-r2 |
| Alpine 3.5 | libvncserver | 0.9.10-r2 |
| Alpine 3.6 | libvncserver | 0.9.11-r0 |
| Alpine 3.7 | libvncserver | 0.9.11-r0 |
| Alpine 3.8 | libvncserver | 0.9.11-r0 |
| Alpine 3.9 | libvncserver | 0.9.11-r0 |
| Arch Linux | libvncserver | 0.9.11-1 |
| Debian 12 | libvncserver | 0.9.11+dfsg-1 |
| Debian 12 | veyon | 4.1.4+repack1-1 |
| Debian 13 | libvncserver | 0.9.11+dfsg-1 |
| Debian 13 | veyon | 4.1.4+repack1-1 |
| Debian 14 | libvncserver | 0.9.11+dfsg-1 |
| Debian 7 | libvncserver | 0.9.9+dfsg-1+deb7u2 |
| Debian 8 | italc | 1:2.0.2+dfsg1-2+deb8u1 |
| Debian 8 | libvncserver | 0.9.9+dfsg2-6.1+deb8u2 |
| SUSE Linux Enterprise Desktop 12 SP1 | tigervnc | 1.4.3-19.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | tigervnc | 1.6.0-16.4 |
| SUSE Linux Enterprise Server 11 SP4 | LibVNCServer | 0.9.1-159.1 |
| SUSE Linux Enterprise Server 12 SP1 | tigervnc | 1.4.3-19.1 |
| SUSE Linux Enterprise Server 12 SP2 | LibVNCServer | 0.9.9-17.5.1 |
| SUSE Linux Enterprise Server 12 SP2 | tigervnc | 1.6.0-16.4 |
| SUSE Linux Enterprise Server 12 SP3 | LibVNCServer | 0.9.9-17.5.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | LibVNCServer | 0.9.9-17.5.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | tigervnc | 1.6.0-16.4 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | LibVNCServer | 0.9.1-159.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | tigervnc | 1.4.3-19.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | LibVNCServer | 0.9.9-17.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | tigervnc | 1.6.0-16.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | LibVNCServer | 0.9.9-17.5.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | LibVNCServer | 0.9.1-159.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | LibVNCServer | 0.9.9-17.5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | LibVNCServer | 0.9.9-17.5.1 |
| Ubuntu 14.04 LTS | libvncserver | 0.9.9+dfsg-1ubuntu1.2 |
| Ubuntu 16.04 LTS | italc | 1:2.0.2+dfsg1-4ubuntu0.1 |
| Ubuntu 16.04 LTS | libvncserver | 0.9.10+dfsg-3ubuntu0.16.04.1 |