CVE-2018-20748 PUBLISHED

LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.

EPSS 10.57% · 93.2th percentile

Risk Scores

EPSS Score
10.57%
93.2th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTStightvnc1.3.10-0ubuntu4, 1.3.10-0ubuntu3, 0
Ubuntu:14.04:LTSlibvncserver0.9.9+dfsg-1ubuntu1.1, 0.9.9+dfsg-1ubuntu1.2, 0.9.9+dfsg-1ubuntu1.3
Ubuntu:16.04:LTSitalc1:2.0.2+dfsg1-3, 1:2.0.2+dfsg1-4, 0
Ubuntu:16.04:LTStightvnc0, 1.3.10-0ubuntu3, 1.3.10-0ubuntu2
Ubuntu:25.10tightvnc0, 1:1.3.10-10, 1:1.3.10-9
Ubuntu:16.04:LTSlibvncserver0.9.10+dfsg-3build1, 0.9.10+dfsg-3, 0
Ubuntu:18.04:LTSitalc1:3.0.3+dfsg1-2, 0, 1:3.0.3+dfsg1-1
Ubuntu:24.04:LTStightvnc0, 1:1.3.10-8, 1:1.3.10-7build2
Ubuntu:Pro:14.04:LTStightvnc0, 1.3.9-6.4ubuntu1, 1.3.9-6.4
Ubuntu:20.04:LTStightvnc1.3.10-0ubuntu5, 0
Ubuntu:18.04:LTSlibvncserver0.9.11+dfsg-1ubuntu1, 0, 0.9.11+dfsg-1
Ubuntu:22.04:LTStightvnc1:1.3.10-5, 1:1.3.10-3, 0

Timeline

References

Open in Interactive Console →