CVE-2018-20748

NameCVE-2018-20748
DescriptionLibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-1652-1, DLA-1979-1
Debian Bugs920941

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libvncserver (PTS)buster0.9.11+dfsg-1.3+deb10u4fixed
buster (security)0.9.11+dfsg-1.3+deb10u5fixed
bullseye0.9.13+dfsg-2+deb11u1fixed
sid, trixie, bookworm0.9.14+dfsg-1fixed
veyon (PTS)buster4.1.7+repack1-1fixed
bullseye4.5.3+repack1-1fixed
sid, trixie, bookworm4.7.5+repack1-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
italcsourcejessie1:2.0.2+dfsg1-2+deb8u1DLA-1979-1
italcsourcestretch(not affected)
italcsource(unstable)(unfixed)
libvncserversourcejessie0.9.9+dfsg2-6.1+deb8u5DLA-1652-1
libvncserversourcestretch(not affected)
libvncserversource(unstable)0.9.11+dfsg-1.3920941
veyonsource(unstable)4.1.7+repack1-1

Notes

[stretch] - libvncserver <not-affected> (Incomplete fix for CVE-2018-20019 not applied)
[stretch] - italc <not-affected> (Incomplete fix for CVE-2018-20019 not applied)
https://github.com/LibVNC/libvncserver/commit/c5ba3fee85a7ecbbca1df5ffd46d32b92757bc2a
https://github.com/LibVNC/libvncserver/commit/e34bcbb759ca5bef85809967a268fdf214c1ad2c
https://github.com/LibVNC/libvncserver/commit/c2c4b81e6cb3b485fb1ec7ba9e7defeb889f6ba7
https://github.com/LibVNC/libvncserver/commit/a64c3b37af9a6c8f8009d7516874b8d266b42bae

Search for package or bug name: Reporting problems