LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvncserver | Feb 20, 2019 | Jan 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvncserver | Feb 22, 2019 | Jan 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvncserver | Mar 27, 2019 | Jan 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libvncserver | Mar 11, 2019 | Jan 30, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 30, 2019 |
| Suse | — | Upgrade libvncclient0Upgrade LibVNCServerUpgrade libvncserver0Upgrade LibVNCServer-devel | Feb 12, 2019 | Jan 30, 2019 |
| Ubuntu | — | Upgrade italc-clientUpgrade libvncclient1Upgrade libvncserver1Upgrade italc-masterUpgrade libitalccoreUpgrade libvncserver0 | Feb 6, 2019 | Jan 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub