Red Hat Security Advisory

RHSA-2019:0059

libvncserver security update

Released 2019-01-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libvncserver-0.9.9-13.el7_6
Red Hat Enterprise Linux Client Optional (v. 7) libvncserver-devel-0.9.9-13.el7_6
Red Hat Enterprise Linux Server (v. 7) libvncserver-0.9.9-13.el7_6
Red Hat Enterprise Linux Server Optional (v. 7) libvncserver-devel-0.9.9-13.el7_6
Red Hat Enterprise Linux Workstation (v. 7) libvncserver-0.9.9-13.el7_6
Red Hat Enterprise Linux Workstation Optional (v. 7) libvncserver-devel-0.9.9-13.el7_6
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libvncserver-0.9.9-13.el7_6
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libvncserver-devel-0.9.9-13.el7_6

Fixes 1 record

TI-2018-10821 CVE-2018-15127 · GHSA-2pgv-ghf3-xj9q

Out-of-bounds write in LibVNC

MEDIUM 58

LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.15089 Published 2018-12-19 Partial fix CWE-787