Red Hat Security Advisory

RHSA-2020:3281

libvncserver security update

Released 2020-08-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libvncserver-0.9.9-14.el7_8.1
Red Hat Enterprise Linux Client Optional (v. 7) libvncserver-devel-0.9.9-14.el7_8.1
Red Hat Enterprise Linux Server (v. 7) libvncserver-0.9.9-14.el7_8.1
Red Hat Enterprise Linux Server Optional (v. 7) libvncserver-devel-0.9.9-14.el7_8.1
Red Hat Enterprise Linux Workstation (v. 7) libvncserver-0.9.9-14.el7_8.1
Red Hat Enterprise Linux Workstation Optional (v. 7) libvncserver-devel-0.9.9-14.el7_8.1

TI-2017-14070 CVE-2017-18922 · GHSA-hq8f-cpqj-qph2

MEDIUM 46

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02259 Published 2020-06-30 Fixed CWE-787