LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libvncserveramazon-linux-ami-2-upgrade-libvncserver-debuginfoamazon-linux-ami-2-upgrade-libvncserver-devel | Apr 27, 2020 | Dec 19, 2018 | |
| Centos_linux | — | centos-upgrade-libvncservercentos-upgrade-libvncserver-debuginfocentos-upgrade-libvncserver-devel | Jan 18, 2019 | Dec 19, 2018 |
| Debian | debian-upgrade-libvncserver | Feb 4, 2019 | Dec 19, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libvncserver | Feb 22, 2019 | Dec 19, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libvncserver | Feb 15, 2019 | Dec 19, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libvncserver | Feb 15, 2019 | Dec 19, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-libvncserveroracle-linux-upgrade-libvncserver-devel | Jul 21, 2020 | Dec 19, 2018 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libvncserverredhat-upgrade-libvncserver-debuginforedhat-upgrade-libvncserver-devel | Jan 16, 2019 | Dec 19, 2018 | |
| Suse | — | suse-upgrade-libvncclient0suse-upgrade-libvncserversuse-upgrade-libvncserver-develsuse-upgrade-libvncserver0 | Jan 11, 2019 | Dec 19, 2018 |
| Ubuntu | ubuntu-upgrade-italc-clientubuntu-upgrade-italc-masterubuntu-upgrade-libitalccoreubuntu-upgrade-libvncclient1ubuntu-upgrade-libvncserver0ubuntu-upgrade-libvncserver1 | Feb 6, 2019 | Dec 19, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub