CVE - CVE-2018-20748

CVE-ID
CVE-2018-20748	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf MISC:https://github.com/LibVNC/libvncserver/commit/a64c3b37af9a6c8f8009d7516874b8d266b42bae MISC:https://github.com/LibVNC/libvncserver/commit/c2c4b81e6cb3b485fb1ec7ba9e7defeb889f6ba7 MISC:https://github.com/LibVNC/libvncserver/commit/c5ba3fee85a7ecbbca1df5ffd46d32b92757bc2a MISC:https://github.com/LibVNC/libvncserver/commit/e34bcbb759ca5bef85809967a268fdf214c1ad2c MISC:https://github.com/LibVNC/libvncserver/issues/273 MISC:https://www.openwall.com/lists/oss-security/2018/12/10/8 MLIST:[debian-lts-announce] 20190131 [SECURITY] [DLA 1652-1] libvncserver security update URL:https://lists.debian.org/debian-lts-announce/2019/01/msg00029.html MLIST:[debian-lts-announce] 20191030 [SECURITY] [DLA 1979-1] italc security update URL:https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html UBUNTU:USN-3877-1 URL:https://usn.ubuntu.com/3877-1/ UBUNTU:USN-4547-1 URL:https://usn.ubuntu.com/4547-1/ UBUNTU:USN-4587-1 URL:https://usn.ubuntu.com/4587-1/
Assigning CNA
MITRE Corporation
Date Record Created
20190130	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20190130)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)