Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:0196-1

Опубликовано: 23 мар. 2019
Источник: suse-cvrf

Описание

Security update for LibVNCServer

This update for LibVNCServer fixes the following issues:

Security issues fixed:

  • CVE-2018-20749: Fixed a heap out of bounds write vulnerability in rfbserver.c (bsc#1123828)
  • CVE-2018-20750: Fixed a heap out of bounds write vulnerability in rfbserver.c (bsc#1123832)
  • CVE-2018-20748: Fixed multiple heap out-of-bound writes in VNC client code (bsc#1123823)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
LibVNCServer-devel-0.9.10-lp150.3.6.1
libvncclient0-0.9.10-lp150.3.6.1
libvncserver0-0.9.10-lp150.3.6.1

Ссылки

Описание

LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.

Затронутые продукты
openSUSE Leap 15.0:LibVNCServer-devel-0.9.10-lp150.3.6.1
openSUSE Leap 15.0:libvncclient0-0.9.10-lp150.3.6.1
openSUSE Leap 15.0:libvncserver0-0.9.10-lp150.3.6.1
Ссылки

Описание

LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.

Затронутые продукты
openSUSE Leap 15.0:LibVNCServer-devel-0.9.10-lp150.3.6.1
openSUSE Leap 15.0:libvncclient0-0.9.10-lp150.3.6.1
openSUSE Leap 15.0:libvncserver0-0.9.10-lp150.3.6.1
Ссылки

Описание

LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.

Затронутые продукты
openSUSE Leap 15.0:LibVNCServer-devel-0.9.10-lp150.3.6.1
openSUSE Leap 15.0:libvncclient0-0.9.10-lp150.3.6.1
openSUSE Leap 15.0:libvncserver0-0.9.10-lp150.3.6.1
Ссылки