Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1173-1

Опубликовано: 02 апр. 2026
Источник: suse-cvrf

Описание

Security update for LibVNCServer

This update for LibVNCServer fixes the following issues:

  • CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431).
  • CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260429).

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP7
LibVNCServer-devel-0.9.14-150600.3.6.1
libvncclient1-0.9.14-150600.3.6.1
libvncserver1-0.9.14-150600.3.6.1
SUSE Linux Enterprise Workstation Extension 15 SP7
libvncclient1-0.9.14-150600.3.6.1
libvncserver1-0.9.14-150600.3.6.1
openSUSE Leap 15.6
LibVNCServer-devel-0.9.14-150600.3.6.1
libvncclient1-0.9.14-150600.3.6.1
libvncserver1-0.9.14-150600.3.6.1

Ссылки

Описание

LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or application crash. Attackers can exploit improper bounds checking in the HandleUltraZipBPP() function by manipulating subrectangle header counts to read beyond the allocated heap buffer.

Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:LibVNCServer-devel-0.9.14-150600.3.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:libvncclient1-0.9.14-150600.3.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:libvncserver1-0.9.14-150600.3.6.1
SUSE Linux Enterprise Workstation Extension 15 SP7:libvncclient1-0.9.14-150600.3.6.1
Ссылки

Описание

LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit missing validation of strchr() return values in the CONNECT and GET proxy handling paths to trigger null pointer dereferences and crash the server when httpd and proxy features are enabled.

Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:LibVNCServer-devel-0.9.14-150600.3.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:libvncclient1-0.9.14-150600.3.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:libvncserver1-0.9.14-150600.3.6.1
SUSE Linux Enterprise Workstation Extension 15 SP7:libvncclient1-0.9.14-150600.3.6.1
Ссылки
Уязвимость SUSE-SU-2026:1173-1