PT-2018-3545 · Libvncserver+6 · Libvncserver+6

Pavel Cheremushkin · Published 2018-09-11 · Updated 2022-03-10 · CVE-2018-21247

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: LibVNCServer versions prior to 0.9.13

Description: The issue is related to the implementation of the ConnectToRFBRepeater function in the LibVNCServer library, which lacks protection of service data. This can lead to an information leak of uninitialized memory contents. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations: For versions prior to 0.9.13, update to version 0.9.13 or later to resolve the issue. As a temporary workaround, consider disabling the ConnectToRFBRepeater function until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-909

CWE-200

Related Identifiers

ALSA-2021:1811

ALT-PU-2020-2671

ALT-PU-2020-2694

BDU:2020-03958

CESA-2021_1811

CVE-2018-21247

DLA-1617-1

DSA-4383-1

OPENSUSE-SU-2020:0988-1

OPENSUSE-SU-2020:1025-1

OPENSUSE-SU-2020:1056-1

OPENSUSE-SU-2020_0988-1

OPENSUSE-SU-2020_1025-1

OPENSUSE-SU-2020_1056-1

OPENSUSE-SU-2024:10598-1

RHSA-2021:1811

RHSA-2021_1811

RLSA-2021:1811

SUSE-SU-2020:1922-1

SUSE-SU-2020:2167-1

Affected Products

Alt Linux

Almalinux

Centos

Libvncserver

Red Hat

Rocky Linux

Suse

References · 71

• https://github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13 · Patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F6FUH4EFK4NAP6GT4TQRTBKWIRCZLIY · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2021-1811.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2021:1811 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2021:1811 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2167-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-21247 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:1922-1 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf · Patch
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/NVP7TJVYJDXDFRHVQ3ENEN3H354QPXEZ · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4383-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2021:1811 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html · Vendor Advisory