← Back

CVE-2018-20024

nvd nist
Published: Dec 19, 2018Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS.

Affected (7)

Libvnc Project
1 product
Libvncserver
Canonical
1 product
Ubuntu Linux
Debian
1 product
Debian Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Libvncserver
Before 0.9.12
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 18.10
Debian
Debian Linux
Version 8.0
Debian Linux
Version 9.0

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (22)

Source: vulnerability@kaspersky.com
Third Party Advisory
Source: vulnerability@kaspersky.com
Mailing ListThird Party Advisory
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Third Party Advisory
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Source: vulnerability@kaspersky.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.