CVE-2018-7225
CVE-2018-7225
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
CVSS 9.8 · Critical · EPSS 6.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libvncserver Debian:12
- Affected ranges
- ECOSYSTEM: < 0.9.11+dfsg-1.1
Update to 0.9.11+dfsg-1.1
libvncserver Debian:13
- Affected ranges
- ECOSYSTEM: < 0.9.11+dfsg-1.1
Update to 0.9.11+dfsg-1.1
libvncserver Debian:14
- Affected ranges
- ECOSYSTEM: < 0.9.11+dfsg-1.1
Update to 0.9.11+dfsg-1.1
tightvnc Debian:12
- Affected ranges
- ECOSYSTEM: < 1:1.3.9-9.1
Update to 1:1.3.9-9.1
tightvnc Debian:13
- Affected ranges
- ECOSYSTEM: < 1:1.3.9-9.1
Update to 1:1.3.9-9.1
tightvnc Debian:14
- Affected ranges
- ECOSYSTEM: < 1:1.3.9-9.1
Update to 1:1.3.9-9.1
vino Debian:12
- Affected ranges
- ECOSYSTEM: < 3.22.0-6
Update to 3.22.0-6
libvncserver Ubuntu:14.04:LTS
- Versions
- 0.9.9+dfsg-1
- 0.9.9+dfsg-1ubuntu1
- 0.9.9+dfsg-1ubuntu1.1
- 0.9.9+dfsg-1ubuntu1.2
- Affected ranges
- ECOSYSTEM: < 0.9.9+dfsg-1ubuntu1.3
Update to 0.9.9+dfsg-1ubuntu1.3
tightvnc Ubuntu:Pro:14.04:LTS
- Versions
- 1.3.9-6.4
- 1.3.9-6.4ubuntu1
- Affected ranges
- ECOSYSTEM: < 1.3.9-6.5+deb8u1build0.14.04.1~esm1
Update to 1.3.9-6.5+deb8u1build0.14.04.1~esm1
italc Ubuntu:16.04:LTS
- Versions
- 1:2.0.2+dfsg1-3
- 1:2.0.2+dfsg1-4
- Affected ranges
- ECOSYSTEM: < 1:2.0.2+dfsg1-4ubuntu0.1
Update to 1:2.0.2+dfsg1-4ubuntu0.1
libvncserver Ubuntu:16.04:LTS
- Versions
- 0.9.10+dfsg-3
- 0.9.10+dfsg-3build1
- 0.9.10+dfsg-3ubuntu0.16.04.1
- Affected ranges
- ECOSYSTEM: < 0.9.10+dfsg-3ubuntu0.16.04.2
Update to 0.9.10+dfsg-3ubuntu0.16.04.2
vino Ubuntu:16.04:LTS
- Versions
- 3.8.1-0ubuntu6
- 3.8.1-0ubuntu7
- 3.8.1-0ubuntu8
- 3.8.1-0ubuntu9
- 3.8.1-0ubuntu9.1
- 3.8.1-0ubuntu9.2
- Affected ranges
- ECOSYSTEM: < 3.8.1-0ubuntu9.3
Update to 3.8.1-0ubuntu9.3
tightvnc Ubuntu:16.04:LTS
- Versions
- 1.3.10-0ubuntu2
- 1.3.10-0ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
italc Ubuntu:18.04:LTS
- Versions
- 1:3.0.3+dfsg1-1
- 1:3.0.3+dfsg1-2
- 1:3.0.3+dfsg1-2build1
- 1:3.0.3+dfsg1-2ubuntu1
- 1:3.0.3+dfsg1-3
- Affected ranges
- ECOSYSTEM: < 1:3.0.3+dfsg1-3ubuntu0.1
Update to 1:3.0.3+dfsg1-3ubuntu0.1
vino Ubuntu:18.04:LTS
- Versions
- 3.8.1-0ubuntu12
- 3.22.0-2ubuntu1
- 3.22.0-3ubuntu1
- Affected ranges
- ECOSYSTEM: < 3.22.0-3ubuntu1.1
Update to 3.22.0-3ubuntu1.1
tightvnc Ubuntu:18.04:LTS
- Versions
- 1.3.10-0ubuntu3
- 1.3.10-0ubuntu4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
vino Ubuntu:20.04:LTS
- Versions
- 3.22.0-5ubuntu2
- Affected ranges
- ECOSYSTEM: < 3.22.0-5ubuntu2.1
Update to 3.22.0-5ubuntu2.1
tightvnc Ubuntu:20.04:LTS
- Versions
- 1.3.10-0ubuntu5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:22.04:LTS
- Versions
- 1:1.3.10-3
- 1:1.3.10-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:24.04:LTS
- Versions
- 1:1.3.10-7
- 1:1.3.10-7build1
- 1:1.3.10-7build2
- 1:1.3.10-8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:25.10
- Versions
- 1:1.3.10-9
- 1:1.3.10-10
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:26.10
- Versions
- 1:1.3.10-10build1
- 1:1.3.10-11
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tightvnc Ubuntu:26.04:LTS
- Versions
- 1:1.3.10-10
- 1:1.3.10-10build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://www.debian.org/security/2018/dsa-4221
- https://usn.ubuntu.com/3618-1/
- https://github.com/LibVNC/libvncserver/issues/218
- https://lists.debian.org/debian-lts-announce/2018/03/msg00035.html
- http://www.securityfocus.com/bid/103107
- http://www.openwall.com/lists/oss-security/2018/02/18/1
- https://access.redhat.com/errata/RHSA-2018:1055
- https://security.gentoo.org/glsa/201908-05
- https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
- https://lists.debian.org/debian-lts-announce/2019/11/msg00032.html
- https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html
- https://usn.ubuntu.com/4547-1/
- https://usn.ubuntu.com/4573-1/
- https://usn.ubuntu.com/4587-1/
- https://nvd.nist.gov/vuln/detail/CVE-2018-7225