VDB

CVE-2018-20020

CVE-2018-20020 PUBLISHED

LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client code that can result remote code execution

EPSS 21.03% · 95.8th percentile

Risk Scores

EPSS Score
21.03%
95.8th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTStightvnc1:1.3.10-7, 0, 1:1.3.10-7build1
Ubuntu:Pro:14.04:LTStightvnc1.3.9-6.4ubuntu1, 1.3.9-6.4, 0
Ubuntu:16.04:LTSssvnc0, 1.0.29-2build1
Ubuntu:22.04:LTStightvnc0, *, *
Ubuntu:25.10tightvnc*, 0, 1:1.3.10-10
Ubuntu:18.04:LTSitalc1:3.0.3+dfsg1-3, *, *
Ubuntu:20.04:LTStightvnc0, 1.3.10-0ubuntu5
Ubuntu:18.04:LTSssvnc1.0.29-3build1, 1.0.29-3, 0
Ubuntu:16.04:LTSlibvncserver0, 0.9.10+dfsg-3build1, 0.9.10+dfsg-3
Ubuntu:14.04:LTSlibvncserver0.9.9+dfsg-1, 0, 0.9.9+dfsg-1ubuntu1
Ubuntu:16.04:LTStightvnc1.3.10-0ubuntu3, 1.3.10-0ubuntu2, 0
Ubuntu:16.04:LTSitalc0, 1:2.0.2+dfsg1-4, 1:2.0.2+dfsg1-3
Ubuntu:18.04:LTSlibvncserver0, 0.9.11+dfsg-1, 0.9.11+dfsg-1ubuntu1
Ubuntu:18.04:LTStightvnc1.3.10-0ubuntu4, 1.3.10-0ubuntu3, 0

Timeline

  • Dec 19, 2018 CVE Published
  • Apr 14, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score
  • Mar 11, 2023 EPSS Score
  • Jul 15, 2023 EPSS Score
  • Sep 15, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›