NetSight
IP …
critical9.8

CVE-2018-20749

LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c.

Impact

LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.

Affected products

VendorProductAffected versions
Libvnc ProjectLibvncserver
before 0.9.12
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10
DebianDebian Linux
Versions 8.0, 9.0
SiemensSimatic Itc1500 Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc1500 Pro Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc1900 Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc1900 Pro Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc2200 Firmware
from 3.0.0.0 before 3.2.1.0
SiemensSimatic Itc2200 Pro Firmware
from 3.0.0.0 before 3.2.1.0

Weakness classification

CWE-787

References