LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvncserverUpgrade veyon | Feb 20, 2019 | Jan 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvncserver | Feb 22, 2019 | Jan 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvncserver | Mar 27, 2019 | Jan 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libvncserver | Mar 11, 2019 | Jan 30, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 30, 2019 |
| Suse | — | Upgrade libvncclient0Upgrade LibVNCServerUpgrade LibVNCServer-develUpgrade libvncserver0 | Feb 12, 2019 | Jan 30, 2019 |
| Ubuntu | — | Upgrade libvncserver1Upgrade libvncclient1Upgrade italc-clientUpgrade libvncserver0Upgrade italc-masterUpgrade libitalccore | Feb 6, 2019 | Jan 30, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub