PT-2018-2459 · Libvnc+3 · Libvnc+3

Pavel Cheremushkin

·

Publicado

2018-09-11

·

Atualizado

2021-01-15

·

CVE-2018-20021

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions LibVNC versions prior to commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c
Description The issue is related to an infinite loop in the VNC client code, allowing an attacker to consume excessive resources such as CPU and RAM. This can lead to a denial of service. The vulnerability can be exploited by a remote attacker.
Recommendations For LibVNC versions prior to commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c, update to a version that includes the fix for this issue.

Correção

Infinite Loop

Resource Exhaustion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-835CWE-400

Identificadores relacionados

ALT-PU-2019-2585
ALT-PU-2019-2662
ALT-PU-2021-1040
BDU:2019-00698
CVE-2018-20021
DLA-1617-1
DLA-1979-1
DLA-2016-1
DLA-2045-1
DSA-4383-1
MGASA-2019-0037
MGASA-2020-0435
OPENSUSE-SU-2019:0053-1
OPENSUSE-SU-2019_0045-1
OPENSUSE-SU-2019_0053-1
OPENSUSE-SU-2024:10598-1
SUSE-SU-2019:0060-1
SUSE-SU-2019:0060-2
SUSE-SU-2019:0080-1
SUSE-SU-2019:13927-1
USN-3877-1
USN-4547-1
USN-4547-2
USN-4587-1

Produtos afetados

Alt Linux
Libvnc
Suse
Ubuntu