CVE-2018-20750 - Vulncode-DB

LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.

Products	Ubuntu_linux, Debian_linux, Libvncserver, Simatic_itc1500_firmware, Simatic_itc1500_pro_firmware, Simatic_itc1900_firmware, Simatic_itc1900_pro_firmware, Simatic_itc2200_firmware, Simatic_itc2200_pro_firmware
Type	Out-of-bounds Write (CWE-787)
First patch	https://github.com/LibVNC/libvncserver/commit/09e8fc02f59f16e2583b34fe1a270c238bd9ffec
Relevant file/s	./libvncserver/rfbserver.c (modified, +6, -1)
Links	• https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf • https://lists.debian.org/debian-lts-announce/2019/01/msg00029.html • https://github.com/LibVNC/libvncserver/issues/273 • https://usn.ubuntu.com/4547-1/ • https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html More/Less (4) • https://usn.ubuntu.com/3877-1/ • https://www.openwall.com/lists/oss-security/2018/12/10/8 • http://www.securityfocus.com/bid/106825 • https://usn.ubuntu.com/4587-1/

libvncserver - Tree: 09e8fc02f5

(? files)

Filter Settings

All Files

Relevant Files

Vulnerable Files

Patched Files

Files

VS-Dark VS-Bright Monokai Darcula

Navigation

Patch data:

(on by default)

Patched area: