{"id":"CVE-2018-20750","published":"2019-01-30T18:00:00Z","modified":"2024-08-05T12:12:28Z","title":"LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c","vendor":null,"product":null,"tier":"tail","description":{"text":"LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.03335,"percentile":0.88589,"provenance":"source"},"cwes":[],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2019/01/msg00029.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.securityfocus.com/bid/106825","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://github.com/LibVNC/libvncserver/issues/273","tags":["x_refsource_MISC"]},{"url":"https://github.com/LibVNC/libvncserver/commit/09e8fc02f59f16e2583b34fe1a270c238bd9ffec","tags":["x_refsource_MISC"]},{"url":"https://usn.ubuntu.com/3877-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://www.openwall.com/lists/oss-security/2018/12/10/8","tags":["x_refsource_MISC"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://usn.ubuntu.com/4547-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/4587-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf","tags":["x_refsource_CONFIRM"]}],"priority":{"score":17.7,"factors":[{"name":"EPSS percentile","points":17.72}]},"euvd":{"id":"EUVD-2018-13293","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2018-15127-family-cve-2018-15127","parents":[{"from":"CVE-2018-15127","to":"CVE-2018-20750","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.","from":"CVE.org","in":"CVE-2018-20750"}]},{"from":"CVE-2018-20749","to":"CVE-2018-20750","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["libvncserver/rfbserver.c"],"commits":["https://github.com/LibVNC/libvncserver/commit/15bb719c03cc70f14c36a843dcb16ed69b405707","https://github.com/LibVNC/libvncserver/commit/09e8fc02f59f16e2583b34fe1a270c238bd9ffec"],"basis":"shared function","functions":["rfbProcessFileTransferReadBuffer"]}]}]}}