LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/106825 | Broken Link |
https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf | Patch Third Party Advisory |
https://github.com/LibVNC/libvncserver/commit/09e8fc02f59f16e2583b34fe1a270c238bd9ffec | Patch Third Party Advisory |
https://github.com/LibVNC/libvncserver/issues/273 | Issue Tracking Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2019/01/msg00029.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html | Mailing List Third Party Advisory |
https://usn.ubuntu.com/3877-1/ | Third Party Advisory |
https://usn.ubuntu.com/4547-1/ | Third Party Advisory |
https://usn.ubuntu.com/4587-1/ | Third Party Advisory |
https://www.openwall.com/lists/oss-security/2018/12/10/8 | Exploit Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
Configuration 8 (hide)
AND |
|
Configuration 9 (hide)
AND |
|
History
09 Mar 2022, 21:55
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:h:siemens:simatic_itc1500_pro:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:simatic_itc1900:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:simatic_itc1500:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:simatic_itc2200:-:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* cpe:2.3:o:siemens:simatic_itc1900_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:simatic_itc2200_pro_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:simatic_itc1900_pro:-:*:*:*:*:*:*:* cpe:2.3:a:libvnc_project:libvncserver:*:*:*:*:*:*:*:* cpe:2.3:h:siemens:simatic_itc2200_pro:-:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:siemens:simatic_itc1900_pro_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:simatic_itc2200_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:simatic_itc1500_pro_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:simatic_itc1500_firmware:*:*:*:*:*:*:*:* |
|
First Time |
Siemens simatic Itc2200
Siemens simatic Itc2200 Pro Firmware Siemens Siemens simatic Itc1900 Pro Siemens simatic Itc1500 Libvnc Project Siemens simatic Itc1900 Siemens simatic Itc1900 Firmware Siemens simatic Itc1900 Pro Firmware Siemens simatic Itc1500 Pro Firmware Siemens simatic Itc2200 Firmware Siemens simatic Itc1500 Firmware Siemens simatic Itc2200 Pro Libvnc Project libvncserver Siemens simatic Itc1500 Pro |
|
References | (BID) http://www.securityfocus.com/bid/106825 - Broken Link | |
References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf - Patch, Third Party Advisory | |
References | (UBUNTU) https://usn.ubuntu.com/4587-1/ - Third Party Advisory | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html - Mailing List, Third Party Advisory | |
References | (UBUNTU) https://usn.ubuntu.com/4547-1/ - Third Party Advisory |
14 Dec 2021, 14:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2019-01-30 18:29
Updated : 2023-12-10 12:44
NVD link : CVE-2018-20750
Mitre link : CVE-2018-20750
CVE.ORG link : CVE-2018-20750
JSON object : View
Products Affected
siemens
- simatic_itc1500_pro
- simatic_itc1500_firmware
- simatic_itc1900_firmware
- simatic_itc1900_pro_firmware
- simatic_itc1500
- simatic_itc2200_pro
- simatic_itc2200_pro_firmware
- simatic_itc1900
- simatic_itc2200
- simatic_itc1500_pro_firmware
- simatic_itc2200_firmware
- simatic_itc1900_pro
libvnc_project
- libvncserver
canonical
- ubuntu_linux
debian
- debian_linux
CWE
CWE-787
Out-of-bounds Write