Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-15127: LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution 1661102: CVE-2018-15127 libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libvncserver | 0:0.9.9-13.amzn2 |
| Amazon Linux · 2 | libvncserver-debuginfo | 0:0.9.9-13.amzn2 |
| Amazon Linux · 2 | libvncserver-devel | 0:0.9.9-13.amzn2 |
Vulnerabilities 1
-
Unscored —CVE-2018-15127 EPSS 15%
LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-15127.html