CVE-2018-20748
30.01.2019, 18:29
LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.Enginsight
| Vendor | Product | Version |
|---|---|---|
| libvnc_project | libvncserver | 𝑥 < 0.9.12 |
| debian | debian_linux | 8.0 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 18.10 |
| debian | debian_linux | 8.0 |
| siemens | simatic_itc1500_firmware | 3.0.0.0 ≤ 𝑥 < 3.2.1.0 |
| siemens | simatic_itc1500_pro_firmware | 3.0.0.0 ≤ 𝑥 < 3.2.1.0 |
| siemens | simatic_itc1900_firmware | 3.0.0.0 ≤ 𝑥 < 3.2.1.0 |
| siemens | simatic_itc1900_pro_firmware | 3.0.0.0 ≤ 𝑥 < 3.2.1.0 |
| siemens | simatic_itc2200_firmware | 3.0.0.0 ≤ 𝑥 < 3.2.1.0 |
| siemens | simatic_itc2200_pro_firmware | 3.0.0.0 ≤ 𝑥 < 3.2.1.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| italc |
| ||||||||||||||||||||||||||||
| libvncserver |
| ||||||||||||||||||||||||||||
| tightvnc |
| ||||||||||||||||||||||||||||
| x11vnc |
|
Common Weakness Enumeration
References