Not rated
CVE-2018-20021 LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC…
Description
LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker to consume excessive amount of resources like CPU and RAM
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LibVNC | Versions not published |
References
- DSA-4383 www.debian.org
- [debian-lts-announce] 20181227 [SECURITY] [DLA 1617-1] libvncserver security update lists.debian.org
- ics-cert.kaspersky.com ics-cert.kaspersky.com
- USN-3877-1 usn.ubuntu.com
- GLSA-201908-05 security.gentoo.org
- [debian-lts-announce] 20191030 [SECURITY] [DLA 1979-1] italc security update lists.debian.org
- [debian-lts-announce] 20191129 [SECURITY] [DLA 2016-1] ssvnc security update lists.debian.org
- [debian-lts-announce] 20191221 [SECURITY] [DLA 2045-1] tightvnc security update lists.debian.org
- GLSA-202006-06 security.gentoo.org
- USN-4547-1 usn.ubuntu.com
- USN-4547-2 usn.ubuntu.com
- USN-4587-1 usn.ubuntu.com
Timeline
- Published
- Last modified
Other CVEs of LibVNC
The 9 CVEs of LibVNC →
CVE-2018-15126
LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server…
Not rated
CVE-2018-15127
LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server…
Not rated
CVE-2018-20019
LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write…
Not rated
CVE-2018-20020
LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside…
Not rated