CVE-2018-20748

Published: Jan 30, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.

Affected (12)

Products: Libvnc Project: Libvncserver · Canonical: Ubuntu Linux · Debian: Debian Linux · +1 more

Show all products

Libvnc Project: Libvncserver · Canonical: Ubuntu Linux · Debian: Debian Linux · Siemens: Simatic Itc1500 Firmware, Simatic Itc1500 Pro Firmware, Simatic Itc1900 Firmware, Simatic Itc1900 Pro Firmware, Simatic Itc2200 Firmware, Simatic Itc2200 Pro Firmware

1 product

1 product

1 product

6 products

Simatic Itc1500 Firmware

Simatic Itc1500 Pro Firmware

Simatic Itc1900 Firmware

Simatic Itc1900 Pro Firmware

Simatic Itc2200 Firmware

Simatic Itc2200 Pro Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libvnc Project Libvncserver	Before 0.9.12

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 18.10

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc1500 Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc1500	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc1500 Pro Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc1500 Pro	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc1900 Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc1900	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc1900 Pro Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc1900 Pro	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc2200 Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc2200	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itc2200 Pro Firmware	From 3.0.0.0 to 3.2.1.0

Running on/with	Platform Versions
Siemens Simatic Itc2200 Pro	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (24)

https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/LibVNC/libvncserver/commit/a64c3b37af9a6c8f8009d7516874b8d266b42bae

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/LibVNC/libvncserver/commit/c2c4b81e6cb3b485fb1ec7ba9e7defeb889f6ba7

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/LibVNC/libvncserver/commit/c5ba3fee85a7ecbbca1df5ffd46d32b92757bc2a

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/LibVNC/libvncserver/commit/e34bcbb759ca5bef85809967a268fdf214c1ad2c

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/LibVNC/libvncserver/issues/273

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/01/msg00029.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://usn.ubuntu.com/3877-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4547-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4587-1/

Source: cve@mitre.org

Third Party Advisory

https://www.openwall.com/lists/oss-security/2018/12/10/8

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf