p PatchFirst

CVE-2018-21247

CVE-2018-21247

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.

CVSS 7.5 · High · EPSS 2.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libvncserver Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.9.11+dfsg-1.2

    Update to 0.9.11+dfsg-1.2

  • libvncserver Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.9.11+dfsg-1.2

    Update to 0.9.11+dfsg-1.2

  • libvncserver Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.9.11+dfsg-1.2

    Update to 0.9.11+dfsg-1.2

  • x11vnc Ubuntu:14.04:LTS

    Versions
    • 0.9.13-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libvncserver Ubuntu:16.04:LTS

    Versions
    • 0.9.10+dfsg-3
    • 0.9.10+dfsg-3build1
    • 0.9.10+dfsg-3ubuntu0.16.04.1
    • 0.9.10+dfsg-3ubuntu0.16.04.2
    • 0.9.10+dfsg-3ubuntu0.16.04.3
    • 0.9.10+dfsg-3ubuntu0.16.04.4
    • 0.9.10+dfsg-3ubuntu0.16.04.5
    • 0.9.10+dfsg-3ubuntu0.16.04.6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • x11vnc Ubuntu:Pro:16.04:LTS

    Versions
    • 0.9.13-1.2build1
    • 0.9.13-1.2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libvncserver Ubuntu:18.04:LTS

    Versions
    • 0.9.11+dfsg-1
    • 0.9.11+dfsg-1ubuntu1
    • 0.9.11+dfsg-1ubuntu1.1
    • 0.9.11+dfsg-1ubuntu1.2
    • 0.9.11+dfsg-1ubuntu1.3
    • 0.9.11+dfsg-1ubuntu1.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • x11vnc Ubuntu:Pro:18.04:LTS

    Versions
    • 0.9.13-2
    • 0.9.13-2build1
    • 0.9.13-3
    • 0.9.13-3ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libvncserver Ubuntu:20.04:LTS

    Versions
    • 0.9.11+dfsg-1.3
    • 0.9.12+dfsg-3ubuntu3
    • 0.9.12+dfsg-6
    • 0.9.12+dfsg-7
    • 0.9.12+dfsg-8
    • 0.9.12+dfsg-9
    • 0.9.12+dfsg-9ubuntu0.1
    • 0.9.12+dfsg-9ubuntu0.2
    • 0.9.12+dfsg-9ubuntu0.3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • veyon Ubuntu:20.04:LTS

    Versions
    • 4.2.4+repack1-2
    • 4.2.5+repack1-1
    • 4.3.1+repack1-1
    • 4.3.1+repack1-2
    • 4.3.1+repack1-2build1
    • 4.3.1+repack1-2build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • x11vnc Ubuntu:Pro:20.04:LTS

    Versions
    • 0.9.13-6
    • 0.9.16-3
    • 0.9.16-3ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • veyon Ubuntu:22.04:LTS

    Versions
    • 4.5.3+repack1-1build1
    • 4.5.3+repack1-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • veyon Ubuntu:24.04:LTS

    Versions
    • 4.7.5+repack1-1build2
    • 4.7.5+repack1-1ubuntu1
    • 4.7.5+repack1-1ubuntu3
    • 4.7.5+repack1-1ubuntu4
    • 4.7.5+repack1-1ubuntu5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • veyon Ubuntu:25.10

    Versions
    • 4.7.5+repack1-1ubuntu6
    • 4.7.5+repack1-1ubuntu7
    • 4.9.7+repack1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • veyon Ubuntu:26.10

    Versions
    • 4.9.7+repack1-1build1
    • 4.9.7+repack1-1.1
    • 4.9.7+repack1-1.1build1
    • 4.9.7+repack1-1.1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • veyon Ubuntu:26.04:LTS

    Versions
    • 4.9.7+repack1-1
    • 4.9.7+repack1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →