PT-2018-2459 · Libvnc+3 · Libvnc+3

Pavel Cheremushkin

·

Published

2018-09-11

·

Updated

2021-01-15

·

CVE-2018-20021

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions LibVNC versions prior to commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c
Description The issue is related to an infinite loop in the VNC client code, allowing an attacker to consume excessive resources such as CPU and RAM. This can lead to a denial of service. The vulnerability can be exploited by a remote attacker.
Recommendations For LibVNC versions prior to commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c, update to a version that includes the fix for this issue.

Fix

Infinite Loop

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-835CWE-400

Related Identifiers

ALT-PU-2019-2585
ALT-PU-2019-2662
ALT-PU-2021-1040
BDU:2019-00698
CVE-2018-20021
DLA-1617-1
DLA-1979-1
DLA-2016-1
DLA-2045-1
DSA-4383-1
MGASA-2019-0037
MGASA-2020-0435
OPENSUSE-SU-2019:0053-1
OPENSUSE-SU-2019_0045-1
OPENSUSE-SU-2019_0053-1
OPENSUSE-SU-2024:10598-1
SUSE-SU-2019:0060-1
SUSE-SU-2019:0060-2
SUSE-SU-2019:0080-1
SUSE-SU-2019:13927-1
USN-3877-1
USN-4547-1
USN-4547-2
USN-4587-1

Affected Products

Alt Linux
Libvnc
Suse
Ubuntu