LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvncserver-debuginfoUpgrade libvncserver-develUpgrade libvncserver | Apr 27, 2020 | Dec 19, 2018 |
| Centos_linux | — | Upgrade libvncserver-debuginfoUpgrade libvncserverUpgrade libvncserver-devel | Jan 18, 2019 | Dec 19, 2018 |
| Debian | — | Upgrade libvncserver | Feb 4, 2019 | Dec 19, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvncserver | Feb 22, 2019 | Dec 19, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvncserver | Feb 15, 2019 | Dec 19, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libvncserver | Feb 15, 2019 | Dec 19, 2018 |
| Oracle_linux | — | Upgrade libvncserver-develUpgrade libvncserver | Jul 21, 2020 | Dec 19, 2018 |
| Redhat_linux | — | Upgrade libvncserverUpgrade libvncserver-debuginfoNo solution existsUpgrade libvncserver-devel | Jan 16, 2019 | Dec 19, 2018 |
| Suse | — | Upgrade libvncclient0Upgrade LibVNCServerUpgrade LibVNCServer-develUpgrade libvncserver0 | Jan 11, 2019 | Dec 19, 2018 |
| Ubuntu | — | Upgrade italc-clientUpgrade libvncclient1Upgrade italc-masterUpgrade libitalccoreUpgrade libvncserver0Upgrade libvncserver1 | Feb 6, 2019 | Dec 19, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub