CVE-2020-14400

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.htmlMailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1860361Issue Tracking, Patch, Third Party Advisory
• https://github.com/LibVNC/libvncserver/commit/53073c8d7e232151ea2ecd8a1243124121e10e2dPatch
• https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13Release Notes
• https://lists.debian.org/debian-lts-announce/2020/06/msg00035.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/08/msg00045.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/4434-1/Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.htmlMailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1860361Issue Tracking, Patch, Third Party Advisory
• https://github.com/LibVNC/libvncserver/commit/53073c8d7e232151ea2ecd8a1243124121e10e2dPatch
• https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13Release Notes
• https://lists.debian.org/debian-lts-announce/2020/06/msg00035.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/08/msg00045.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/4434-1/Third Party Advisory

Published

Jun 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-14395Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-14396An issue was discovered in LibVNCServer before 0.9.13. libvn…7.5
• CVE-2020-14397An issue was discovered in LibVNCServer before 0.9.13. libvn…7.5
• CVE-2020-14398An issue was discovered in LibVNCServer before 0.9.13. An im…7.5
• CVE-2020-14399An issue was discovered in LibVNCServer before 0.9.13. Byte-…7.5
• CVE-2020-1440<p>A tampering vulnerability exists when Microsoft SharePoin…6.3
• CVE-2020-14401An issue was discovered in LibVNCServer before 0.9.13. libvn…6.5
• CVE-2020-14402An issue was discovered in LibVNCServer before 0.9.13. libvn…5.4
• CVE-2020-14403An issue was discovered in LibVNCServer before 0.9.13. libvn…5.4
• CVE-2020-14404An issue was discovered in LibVNCServer before 0.9.13. libvn…5.4
• CVE-2020-14405An issue was discovered in LibVNCServer before 0.9.13. libvn…6.5
• CVE-2020-14408An issue was discovered in Agentejo Cockpit 0.10.2. Insuffic…6.1