Every CVE Search/ Get API key

CVE-2017-18922

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode...

9.8 CriticalFix available

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.26%Down 0.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.

Record
CVE-2017-18922
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.

Record
CVE-2017-18922
Updated
2026-11-02
EUVDEUVD-2017-10012 No score

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.

Record
EUVD-2017-10012
Updated
2026-11-03
GitHub AdvisoriesGHSA-hq8f-cpqj-qph2 9.8

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode...

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.

Record
GHSA-hq8f-cpqj-qph2
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSV 9.8

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.

Record
CVE-2017-18922
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-18922 9.8

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.

Record
DEBIAN-CVE-2017-18922
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 16 moreShow less
OSVRHSA-2020:3281 9.8

Red Hat Security Advisory: libvncserver security update

Record
RHSA-2020:3281
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3385 9.8

Red Hat Security Advisory: libvncserver security update

Record
RHSA-2020:3385
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3456 9.8

Red Hat Security Advisory: libvncserver security update

Record
RHSA-2020:3456
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3588 9.8

Red Hat Security Advisory: libvncserver security update

Record
RHSA-2020:3588
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-18922 9.8

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.

Record
UBUNTU-CVE-2017-18922
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2020:3385 No score

Important: libvncserver security update

LibVNCServer is a C library that enables you to implement VNC server functionality into own programs.

Security Fix(es):

  • libvncserver: websocket decoding buffer overflow (CVE-2017-18922)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2020:3385
Updated
2026-11-02
OSVopenSUSE-SU-2020:0960-1 No score

Security update for LibVNCServer

This update for LibVNCServer fixes the following issues:

  • CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer which subsequently used leading to potential remote code execution (bsc#1173477).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:0960-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:0978-1 No score

Security update for LibVNCServer

This update for LibVNCServer fixes the following issues:

  • CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer which subsequently used leading to potential remote code execution (bsc#1173477).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:0978-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:0988-1 No score

Security update for LibVNCServer

This update for LibVNCServer fixes the following issues:

  • security update
  • added patches fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
    • LibVNCServer-CVE-2018-21247.patch fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
    • LibVNCServer-CVE-2019-20839.patch fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
    • LibVNCServer-CVE-2019-20840.patch fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
    • LibVNCServer-CVE-2020-14398.patch fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
    • LibVNCServer-CVE-2020-14397.patch fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
    • LibVNCServer-CVE-2020-14399.patch fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
    • LibVNCServer-CVE-2020-14400.patch fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
    • LibVNCServer-CVE-2020-14401.patch fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
    • LibVNCServer-CVE-2020-14402,14403,14404.patch fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:0988-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1025-1 No score

Security update for LibVNCServer

This update for LibVNCServer fixes the following issues:

  • security update
  • added patches fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
    • LibVNCServer-CVE-2018-21247.patch fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
    • LibVNCServer-CVE-2019-20839.patch fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
    • LibVNCServer-CVE-2019-20840.patch fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
    • LibVNCServer-CVE-2020-14398.patch fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
    • LibVNCServer-CVE-2020-14397.patch fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
    • LibVNCServer-CVE-2020-14399.patch fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
    • LibVNCServer-CVE-2020-14400.patch fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
    • LibVNCServer-CVE-2020-14401.patch fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
    • LibVNCServer-CVE-2020-14402,14403,14404.patch fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:1025-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1056-1 No score

Security update for LibVNCServer

This update for LibVNCServer fixes the following issues:

  • security update
  • added patches fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
    • LibVNCServer-CVE-2018-21247.patch fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
    • LibVNCServer-CVE-2019-20839.patch fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
    • LibVNCServer-CVE-2019-20840.patch fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
    • LibVNCServer-CVE-2020-14398.patch fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
    • LibVNCServer-CVE-2020-14397.patch fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
    • LibVNCServer-CVE-2020-14399.patch fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
    • LibVNCServer-CVE-2020-14400.patch fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
    • LibVNCServer-CVE-2020-14401.patch fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
    • LibVNCServer-CVE-2020-14402,14403,14404.patch fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:1056-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10598-1 No score

LibVNCServer-devel-0.9.13-3.1 on GA media

These are all security issues fixed in the LibVNCServer-devel-0.9.13-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10598-1
Updated
2026-11-02
OSVSUSE-SU-2020:1873-1 No score

Security update for LibVNCServer

This update for LibVNCServer fixes the following issues:

  • CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer which subsequently used leading to potential remote code execution (bsc#1173477).
Record
SUSE-SU-2020:1873-1
Updated
2026-11-02
OSVSUSE-SU-2020:1922-1 No score

Security update for LibVNCServer

This update for LibVNCServer fixes the following issues:

  • security update
  • added patches fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
    • LibVNCServer-CVE-2018-21247.patch fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
    • LibVNCServer-CVE-2019-20839.patch fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
    • LibVNCServer-CVE-2019-20840.patch fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
    • LibVNCServer-CVE-2020-14398.patch fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
    • LibVNCServer-CVE-2020-14397.patch fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
    • LibVNCServer-CVE-2020-14399.patch fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
    • LibVNCServer-CVE-2020-14400.patch fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
    • LibVNCServer-CVE-2020-14401.patch fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
    • LibVNCServer-CVE-2020-14402,14403,14404.patch fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
Record
SUSE-SU-2020:1922-1
Updated
2026-11-02
OSVSUSE-SU-2020:2167-1 No score

Security update for LibVNCServer

This update for LibVNCServer fixes the following issues:

  • security update fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock() fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings. fix CVE-2020-14403 [bsc#1173701], out-of-bounds access via encodings. fix CVE-2020-14404 [bsc#1173701], out-of-bounds access via encodings. fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
Record
SUSE-SU-2020:2167-1
Updated
2026-11-02
OSVUSN-4407-1 No score

libvncserver vulnerabilities

It was discovered that LibVNCServer incorrectly handled decompressing data. An attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service. (CVE-2019-15680)

It was discovered that an information disclosure vulnerability existed in LibVNCServer when sending a ServerCutText message. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 19.10, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS. (CVE-2019-15681)

It was discovered that LibVNCServer incorrectly handled cursor shape updates. If a user were tricked in to connecting to a malicious server, an attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.10, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS. (CVE-2019-15690, CVE-2019-20788)

It was discovered that LibVNCServer incorrectly handled decoding WebSocket frames. An attacker could possibly use this issue to cause LibVNCServer to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.10, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS. (CVE-2017-18922)

Record
USN-4407-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libvncserver-devel
AlmaLinux:8
 before 0.9.11-15.el8_2.1
0.9.11-15.el8_2.1
libvncserver
Debian:12
 before 0.9.12+dfsg-3
0.9.12+dfsg-3
libvncserver
Debian:13
 before 0.9.12+dfsg-3
0.9.12+dfsg-3
libvncserver
Debian:14
 before 0.9.12+dfsg-3
0.9.12+dfsg-3
libvncserver
Red Hat:enterprise_linux:7::client
 before 0:0.9.9-14.el7_8.1
0:0.9.9-14.el7_8.1
libvncserver-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:0.9.9-14.el7_8.1
0:0.9.9-14.el7_8.1
libvncserver-devel
Red Hat:enterprise_linux:7::client
 before 0:0.9.9-14.el7_8.1
0:0.9.9-14.el7_8.1
libvncserver
Red Hat:enterprise_linux:7::server
 before 0:0.9.9-14.el7_8.1
0:0.9.9-14.el7_8.1
libvncserver-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:0.9.9-14.el7_8.1
0:0.9.9-14.el7_8.1
libvncserver-devel
Red Hat:enterprise_linux:7::server
 before 0:0.9.9-14.el7_8.1
0:0.9.9-14.el7_8.1
Show 61 moreShow less
Affected packages
PackageAffectedFixed
libvncserver
Red Hat:enterprise_linux:7::workstation
 before 0:0.9.9-14.el7_8.1
0:0.9.9-14.el7_8.1
libvncserver-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:0.9.9-14.el7_8.1
0:0.9.9-14.el7_8.1
libvncserver-devel
Red Hat:enterprise_linux:7::workstation
 before 0:0.9.9-14.el7_8.1
0:0.9.9-14.el7_8.1
libvncserver
Red Hat:enterprise_linux:8::appstream
 before 0:0.9.11-15.el8_2.1
0:0.9.11-15.el8_2.1
libvncserver-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.9.11-15.el8_2.1
0:0.9.11-15.el8_2.1
libvncserver-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:0.9.11-15.el8_2.1
0:0.9.11-15.el8_2.1
libvncserver
Red Hat:enterprise_linux:8::crb
 before 0:0.9.11-15.el8_2.1
0:0.9.11-15.el8_2.1
libvncserver-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:0.9.11-15.el8_2.1
0:0.9.11-15.el8_2.1
libvncserver-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:0.9.11-15.el8_2.1
0:0.9.11-15.el8_2.1
libvncserver-devel
Red Hat:enterprise_linux:8::crb
 before 0:0.9.11-15.el8_2.1
0:0.9.11-15.el8_2.1
libvncserver
Red Hat:rhel_eus:8.1::appstream
 before 0:0.9.11-9.el8_1.3
0:0.9.11-9.el8_1.3
libvncserver-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:0.9.11-9.el8_1.3
0:0.9.11-9.el8_1.3
libvncserver-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:0.9.11-9.el8_1.3
0:0.9.11-9.el8_1.3
libvncserver
Red Hat:rhel_eus:8.1::crb
 before 0:0.9.11-9.el8_1.3
0:0.9.11-9.el8_1.3
libvncserver-debuginfo
Red Hat:rhel_eus:8.1::crb
 before 0:0.9.11-9.el8_1.3
0:0.9.11-9.el8_1.3
libvncserver-debugsource
Red Hat:rhel_eus:8.1::crb
 before 0:0.9.11-9.el8_1.3
0:0.9.11-9.el8_1.3
libvncserver-devel
Red Hat:rhel_eus:8.1::crb
 before 0:0.9.11-9.el8_1.3
0:0.9.11-9.el8_1.3
libvncserver
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.9.11-9.el8_0.3
0:0.9.11-9.el8_0.3
libvncserver-debuginfo
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.9.11-9.el8_0.3
0:0.9.11-9.el8_0.3
libvncserver-debugsource
Red Hat:rhel_e4s:8.0::appstream
 before 0:0.9.11-9.el8_0.3
0:0.9.11-9.el8_0.3
LibVNCServer
SUSE:Linux Enterprise Module for Package Hub 15 SP1
 before 0.9.10-4.19.1
0.9.10-4.19.1
LibVNCServer
SUSE:Linux Enterprise Module for Package Hub 15 SP2
 before 0.9.10-4.19.1
0.9.10-4.19.1
LibVNCServer
SUSE:Linux Enterprise Workstation Extension 15 SP1
 before 0.9.10-4.19.1
0.9.10-4.19.1
LibVNCServer
SUSE:Linux Enterprise Workstation Extension 15 SP2
 before 0.9.10-4.19.1
0.9.10-4.19.1
LibVNCServer
SUSE:Linux Enterprise Module for Package Hub 15 SP1
 before 0.9.10-4.22.1
0.9.10-4.22.1
LibVNCServer
SUSE:Linux Enterprise Module for Package Hub 15 SP2
 before 0.9.10-4.22.1
0.9.10-4.22.1
LibVNCServer
SUSE:Linux Enterprise Workstation Extension 15 SP1
 before 0.9.10-4.22.1
0.9.10-4.22.1
LibVNCServer
SUSE:Linux Enterprise Workstation Extension 15 SP2
 before 0.9.10-4.22.1
0.9.10-4.22.1
LibVNCServer
SUSE:HPE Helion OpenStack 8
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:OpenStack Cloud 7
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:OpenStack Cloud 8
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:OpenStack Cloud 9
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:OpenStack Cloud Crowbar 8
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:OpenStack Cloud Crowbar 9
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Linux Enterprise Server 12 SP5
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 0.9.9-17.31.1
0.9.9-17.31.1
LibVNCServer
SUSE:Enterprise Storage 5
 before 0.9.9-17.31.1
0.9.9-17.31.1
x11vnc
Ubuntu:14.04:LTS
 All versions, plus listed versions
0.9.13-1.1
 None known
libvncserver
Ubuntu:16.04:LTS
 before 0.9.10+dfsg-3ubuntu0.16.04.4, plus listed versions
0.9.10+dfsg-30.9.10+dfsg-3build10.9.10+dfsg-3ubuntu0.16.04.10.9.10+dfsg-3ubuntu0.16.04.20.9.10+dfsg-3ubuntu0.16.04.3
0.9.10+dfsg-3ubuntu0.16.04.4
libvncserver
Ubuntu:18.04:LTS
 before 0.9.11+dfsg-1ubuntu1.2, plus listed versions
0.9.11+dfsg-10.9.11+dfsg-1ubuntu10.9.11+dfsg-1ubuntu1.1
0.9.11+dfsg-1ubuntu1.2
libvncserver
Ubuntu:20.04:LTS
 before 0.9.12+dfsg-9ubuntu0.1, plus listed versions
0.9.11+dfsg-1.30.9.12+dfsg-3ubuntu30.9.12+dfsg-60.9.12+dfsg-70.9.12+dfsg-80.9.12+dfsg-9
0.9.12+dfsg-9ubuntu0.1
veyon
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.2.4+repack1-24.2.5+repack1-14.3.1+repack1-14.3.1+repack1-24.3.1+repack1-2build14.3.1+repack1-2build2
 None known
veyon
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.5.3+repack1-1build14.5.3+repack1-1build2
 None known
veyon
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.7.5+repack1-1build24.7.5+repack1-1ubuntu14.7.5+repack1-1ubuntu34.7.5+repack1-1ubuntu44.7.5+repack1-1ubuntu5
 None known
veyon
Ubuntu:25.10
 All versions, plus listed versions
4.7.5+repack1-1ubuntu64.7.5+repack1-1ubuntu74.9.7+repack1-1
 None known
veyon
Ubuntu:26.10
 All versions, plus listed versions
4.9.7+repack1-1build14.9.7+repack1-1.14.9.7+repack1-1.1build14.9.7+repack1-1.1build2
 None known
veyon
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.9.7+repack1-14.9.7+repack1-1build1
 None known
LibVNCServer
openSUSE:Leap 15.1
 before 0.9.10-lp151.7.6.1
0.9.10-lp151.7.6.1
LibVNCServer
openSUSE:Leap 15.2
 before 0.9.10-lp152.9.4.1
0.9.10-lp152.9.4.1
LibVNCServer
openSUSE:Leap 15.1
 before 0.9.10-lp151.7.9.1
0.9.10-lp151.7.9.1
LibVNCServer
openSUSE:Leap 15.2
 before 0.9.10-lp152.9.8.1
0.9.10-lp152.9.8.1
LibVNCServer
openSUSE:Leap 15.2
 before 0.9.10-lp152.9.4.2
0.9.10-lp152.9.4.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-18922 is a critical vulnerability (CVSS 9.8) in Libvncserver Project Libvncserver, published June 30, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.26%, the 82nd percentile. Fixed in libvncserver-devel 0.9.11-15.el8_2.1.

References

Show 78 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open