{"id":"CVE-2018-15127","published":"2018-12-19T16:00:00Z","modified":"2024-08-05T09:46:25Z","title":"LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server…","vendor":null,"product":null,"tier":"tail","description":{"text":"LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.15089,"percentile":0.9672,"provenance":"source"},"cwes":[],"references":[{"url":"https://www.debian.org/security/2019/dsa-4383","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-028-libvnc-heap-out-of-bound-write/","tags":["x_refsource_MISC"]},{"url":"https://usn.ubuntu.com/3877-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0059","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://usn.ubuntu.com/4547-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/4587-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]}],"priority":{"score":19.3,"factors":[{"name":"EPSS percentile","points":19.34}]},"affectedVersions":[{"vendor":"n/a","product":"LibVNC","versions":["commit 502821828ed00b4a2c4bef90683d0fd88ce495de"]}],"euvd":{"id":"EUVD-2018-7008","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2018-15127-family-cve-2018-15127","children":[{"from":"CVE-2018-15127","to":"CVE-2018-20749","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.","from":"CVE.org","in":"CVE-2018-20749"}]},{"from":"CVE-2018-15127","to":"CVE-2018-20750","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.","from":"CVE.org","in":"CVE-2018-20750"}]}]}}