CVE-2018-20019

Published: Dec 19, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution

Affected (14)

Products: Libvnc Project: Libvncserver · Canonical: Ubuntu Linux · Debian: Debian Linux · +1 more

Show all products

Libvnc Project: Libvncserver · Canonical: Ubuntu Linux · Debian: Debian Linux · Siemens: Simatic Itc1500 Firmware, Simatic Itc1500 Pro Firmware, Simatic Itc1900 Firmware, Simatic Itc1900 Pro Firmware, Simatic Itc2200 Firmware, Simatic Itc2200 Pro Firmware

1 product

1 product

1 product

6 products

Simatic Itc1500 Firmware

Simatic Itc1500 Pro Firmware

Simatic Itc1900 Firmware

Simatic Itc1900 Pro Firmware

Simatic Itc2200 Firmware

Simatic Itc2200 Pro Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libvnc Project Libvncserver	Before 0.9.12

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 18.10

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc1500 Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc1500	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc1500 Pro Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc1500 Pro	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc1900 Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc1900	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc1900 Pro Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc1900 Pro	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc2200 Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc2200	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc2200 Pro Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc2200 Pro	All versions

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (18)

https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf

Source: vulnerability@kaspersky.com

PatchThird Party Advisory

https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-029-libvnc-multiple-heap-out-of-bound-vulnerabilities/

Source: vulnerability@kaspersky.com

Broken Link

https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html

Source: vulnerability@kaspersky.com

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html

Source: vulnerability@kaspersky.com

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/201908-05

Source: vulnerability@kaspersky.com

Third Party Advisory

https://usn.ubuntu.com/3877-1/

Source: vulnerability@kaspersky.com

Third Party Advisory

https://usn.ubuntu.com/4547-1/

Source: vulnerability@kaspersky.com

Third Party Advisory

https://usn.ubuntu.com/4587-1/

Source: vulnerability@kaspersky.com

Third Party Advisory

https://www.debian.org/security/2019/dsa-4383

Source: vulnerability@kaspersky.com

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-029-libvnc-multiple-heap-out-of-bound-vulnerabilities/

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/201908-05

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/3877-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4547-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4587-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2019/dsa-4383

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.