CVE-2018-7225

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2018/02/18/1 · Exploit
• securityfocus.com/bid/103107 · Third Party Advisory
• access.redhat.com/errata/RHSA-2018:1055 · Third Party Advisory
• LibVNC/libvncserver · Third Party Advisory
• lists.debian.org/debian-lts-announce/2018/03/msg00035.html · Mailing List
• lists.debian.org/debian-lts-announce/2019/10/msg00042.html
• lists.debian.org/debian-lts-announce/2019/11/msg00032.html
• lists.debian.org/debian-lts-announce/2019/12/msg00028.html
• security.gentoo.org/glsa/201908-05
• usn.ubuntu.com/3618-1 · Third Party Advisory
• usn.ubuntu.com/4547-1
• usn.ubuntu.com/4573-1
• usn.ubuntu.com/4587-1
• debian.org/security/2018/dsa-4221 · Third Party Advisory

Lỗ hổng khác của libvncserver

• CVE-2026-32854CAO 7.5LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers…
• CVE-2026-32853CAO 8.1LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding ha…
• CVE-2020-29260CAO 7.5libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
• CVE-2020-25708CAO 7.5A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message…
• CVE-2017-18922NGHIÊM TRỌNG 9.8It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker c…