FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

libvncserver -- memory corruption

Affected packages
libvncserver < 0.9.8

Details

VuXML ID b5e654c3-5644-11e5-9ad8-14dae9d210b8
Discovery 2011-05-19
Entry 2015-09-08

Petr Pisar reports:

libvncserver/tight.c:rfbTightCleanup() frees a buffer without zeroing freed pointer.

References

URL https://bugzilla.redhat.com/show_bug.cgi?id=706087
URL https://github.com/LibVNC/libvncserver/commit/804335f9d296440bb708ca844f5d89b58b50b0c6