Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2018-7225

Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.cAn issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.(CVE-2018-7225)

Source

ALAS2-2018-1012

Amazon Linux 2 Security Advisory: ALAS-2018-1012
Advisory Release Date: 2018-05-10 17:21 Pacific
Advisory Updated Date: 2018-05-10 23:57 Pacific

Severity: Medium

References: CVE-2018-7225

Issue Overview:

Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.(CVE-2018-7225)

Affected Packages:

libvncserver

Issue Correction:
Run yum update libvncserver to update your system.

New Packages:

src:
    libvncserver-0.9.9-12.amzn2.src

x86_64:
    libvncserver-0.9.9-12.amzn2.x86_64
    libvncserver-devel-0.9.9-12.amzn2.x86_64
    libvncserver-debuginfo-0.9.9-12.amzn2.x86_64

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

ALAS2-2018-1012

ALAS2-2018-1012

Vulmon Search

About

Products

Connect