LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvncserver | Feb 20, 2019 | Jan 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvncserver | Feb 22, 2019 | Jan 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvncserver | Mar 27, 2019 | Jan 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libvncserver | Mar 11, 2019 | Jan 30, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 30, 2019 |
| Suse | — | Upgrade libvncclient0Upgrade LibVNCServer-develUpgrade libvncserver0Upgrade LibVNCServer | Feb 12, 2019 | Jan 30, 2019 |
| Ubuntu | — | Upgrade libvncclient1Upgrade libvncserver0Upgrade italc-clientUpgrade libitalccoreUpgrade libvncserver1Upgrade italc-master | Feb 6, 2019 | Jan 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub