Back to search
CVE-2018-7225
Published: Feb 19, 2018
Modified: Aug 5, 2024
PUBLISHED
Description
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
DSA-4221
vendor-advisory
x_refsource_DEBIAN
USN-3618-1
vendor-advisory
x_refsource_UBUNTU
https://github.com/LibVNC/libvncserver/issues/218
x_refsource_MISC
[debian-lts-announce] 20180330 [SECURITY] [DLA 1332-1] libvncserver security update
mailing-list
x_refsource_MLIST
103107
vdb-entry
x_refsource_BID
http://www.openwall.com/lists/oss-security/2018/02/18/1
x_refsource_MISC
RHSA-2018:1055
vendor-advisory
x_refsource_REDHAT
GLSA-201908-05
vendor-advisory
x_refsource_GENTOO
[debian-lts-announce] 20191030 [SECURITY] [DLA 1979-1] italc security update
mailing-list
x_refsource_MLIST
[debian-lts-announce] 20191129 [SECURITY] [DLA 2014-1] vino security update
mailing-list
x_refsource_MLIST
[debian-lts-announce] 20191221 [SECURITY] [DLA 2045-1] tightvnc security update
mailing-list
x_refsource_MLIST
USN-4547-1
vendor-advisory
x_refsource_UBUNTU
USN-4573-1
vendor-advisory
x_refsource_UBUNTU
USN-4587-1
vendor-advisory
x_refsource_UBUNTU
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now