CVE-2018-20748 LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.
CriticalCVSS 9.8
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libvncserver(Debian:12) | < 0.9.11+dfsg-1.3 | 0.9.11+dfsg-1.3 |
| debian/libvncserver(Debian:13) | < 0.9.11+dfsg-1.3 | 0.9.11+dfsg-1.3 |
| debian/libvncserver(Debian:14) | < 0.9.11+dfsg-1.3 | 0.9.11+dfsg-1.3 |
| debian/veyon(Debian:12) | < 4.1.7+repack1-1 | 4.1.7+repack1-1 |
| debian/veyon(Debian:13) | < 4.1.7+repack1-1 | 4.1.7+repack1-1 |
| libvnc project libvncserver | < 0.9.12 | 0.9.12 |
| debian linux | = 8.0 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.10 | No fix listed |
| Siemens simatic itc1500 firmware | >= 3.0.0.0, < 3.2.1.0 | 3.2.1.0 |
| Siemens simatic itc1500 pro firmware | >= 3.0.0.0, < 3.2.1.0 | 3.2.1.0 |
| Siemens simatic itc1900 firmware | >= 3.0.0.0, < 3.2.1.0 | 3.2.1.0 |
| Siemens simatic itc1900 pro firmware | >= 3.0.0.0, < 3.2.1.0 | 3.2.1.0 |
| Siemens simatic itc2200 firmware | >= 3.0.0.0, < 3.2.1.0 | 3.2.1.0 |
| Siemens simatic itc2200 pro firmware | >= 3.0.0.0, < 3.2.1.0 | 3.2.1.0 |
| ubuntu/tightvnc(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/tightvnc(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/tightvnc(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/tightvnc(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-3877-1 vendor-advisory
- USN-4547-1 vendor-advisory
- USN-4587-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-20748 vendor-advisory
- cert-portal.siemens.com patch third-party-advisory
- github.com patch third-party-advisory
- github.com patch third-party-advisory
- github.com patch third-party-advisory
- github.com patch third-party-advisory
- github.com issue-tracking third-party-advisory
- [debian-lts-announce] 20190131 [SECURITY] [DLA 1652-1] libvncserver security update mailing-list third-party-advisory
- [debian-lts-announce] 20191030 [SECURITY] [DLA 1979-1] italc security update mailing-list third-party-advisory
- USN-3877-1 third-party-advisory vendor-advisory
- USN-4547-1 third-party-advisory vendor-advisory
- USN-4587-1 third-party-advisory vendor-advisory
- www.openwall.com exploit mailing-list third-party-advisory
- bugs.debian.org issue-tracking