Lucene search
Veracode Vulnerability DatabaseVERACODE:8083HistoryDec 27, 2018 - 5:50 a.m.
Remote Code Execution (RCE)
2018-12-2705:50:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.724
Percentile
98.1%
libvncserver.so is vulnerable to out-of-bounds write. The cause of the vulnerability is the improper memory allocation and handling for length variable in rfbProcessFileTransferReadBuffer function in libvncserver/rfbserver.c.
References
access.redhat.com/errata/RHSA-2019:0059
github.com/LibVNC/libvncserver/issues/243
ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-028-libvnc-heap-out-of-bound-write/
lists.debian.org/debian-lts-announce/2018/12/msg00017.html
lists.debian.org/debian-lts-announce/2019/10/msg00042.html
usn.ubuntu.com/3877-1/
usn.ubuntu.com/4547-1/
usn.ubuntu.com/4587-1/
www.debian.org/security/2019/dsa-4383
Related
prion
prion
debiancve
debiancve
cvelist
cvelist
checkpoint_advisories
checkpoint_advisories
libVNC File Transfer Extension Heap-based Buffer Overflow (CVE-2018-15127)
2019-11-26 00:00:00
redhatcve
redhatcve
nessus
nessus
EulerOS 2.0 SP3 : libvncserver (EulerOS-SA-2019-1032)
2019-02-15 00:00:00
Scientific Linux Security Update : libvncserver on SL7.x x86_64 (20190115)
2019-01-16 00:00:00
CentOS 7 : libvncserver (CESA-2019:0059)
2019-01-17 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2019-1032)
2020-01-23 00:00:00
CentOS Update for libvncserver CESA-2019:0059 centos7
2019-01-17 00:00:00
Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2019-1068)
2020-01-23 00:00:00
cve
cve
centos
centos
libvncserver security update
2019-01-16 16:58:43
redhat
redhat
(RHSA-2019:0059) Important: libvncserver security update
2019-01-15 08:09:21
amazon
amazon
Important: libvncserver
2019-02-13 18:38:00
nvd
nvd
osv
osv
oraclelinux
oraclelinux
libvncserver security update
2019-01-15 00:00:00
ubuntucve
ubuntucve
alpinelinux
alpinelinux
CVE-2018-20750
2019-01-30 18:29:00
debian
debian
[SECURITY] [DLA 1652-1] libvncserver security update
2019-01-31 14:40:16
[SECURITY] [DLA 1617-1] libvncserver security update
2018-12-27 03:53:08
[SECURITY] [DSA 4383-1] libvncserver security update
2019-02-03 20:52:03
suse
suse
Security update for LibVNCServer (important)
2019-01-18 00:00:00
Security update for LibVNCServer (important)
2019-01-12 00:00:00
mageia
mageia
Updated libvncserver & x11vnc packages fix security vulnerabilities
2019-01-16 01:15:34
Updated italc packages fix security vulnerabilities
2020-11-23 22:51:37
ubuntu
ubuntu
LibVNCServer vulnerabilities
2019-01-31 00:00:00
iTALC vulnerabilities
2020-09-28 00:00:00
iTALC vulnerabilities
2020-10-20 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1900
2021-07-02 17:22:34