CVE-2018-20749 PUBLISHED

LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.

EPSS 10.37% · 93.2th percentile

Risk Scores

EPSS Score
10.37%
93.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibvncserver0.9.10+dfsg-3ubuntu0.16.04.2, 0.9.10+dfsg-3ubuntu0.16.04.1, 0.9.10+dfsg-3build1
Ubuntu:14.04:LTSlibvncserver0.9.9+dfsg-1ubuntu1.3, 0, 0.9.9+dfsg-1
Ubuntu:16.04:LTSitalc1:2.0.2+dfsg1-4, 1:2.0.2+dfsg1-3, 0
Ubuntu:18.04:LTSitalc0, 1:3.0.3+dfsg1-1, 1:3.0.3+dfsg1-2
Ubuntu:18.04:LTSlibvncserver0, 0.9.11+dfsg-1, 0.9.11+dfsg-1ubuntu1

Timeline

References

Open in Interactive Console →