ISOMAN

CVE

CVE-2018-20021

LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker to consume excessive amount of resources like CPU and RAM

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-031-libvnc-infinite-loop/
  2. https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html
  3. https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
  4. https://lists.debian.org/debian-lts-announce/2019/11/msg00033.html
  5. https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html
  6. https://security.gentoo.org/glsa/201908-05
  7. https://security.gentoo.org/glsa/202006-06
  8. https://usn.ubuntu.com/3877-1/
  9. https://usn.ubuntu.com/4547-1/
  10. https://usn.ubuntu.com/4547-2/
  11. https://usn.ubuntu.com/4587-1/
  12. https://www.debian.org/security/2019/dsa-4383
  13. https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-031-libvnc-infinite-loop/
  14. https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html
  15. https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
  16. https://lists.debian.org/debian-lts-announce/2019/11/msg00033.html
  17. https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html
  18. https://security.gentoo.org/glsa/201908-05
  19. https://security.gentoo.org/glsa/202006-06
  20. https://usn.ubuntu.com/3877-1/