Summary
It was discovered that LibVNCServer incorrectly handled certain packet
lengths. A remote attacker able to connect to a LibVNCServer could possibly
use this issue to obtain sensitive information, cause a denial of service,
or execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libvncserver | 0.9.9+dfsg-1ubuntu1.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | libvncserver | 0.9.10+dfsg-3ubuntu0.16.04.2 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitiz…
References
-
report
https://ubuntu.com/security/CVE-2018-7225