{"id":"CVE-2017-18922","aliases":["ALSA-2020:3385","DEBIAN-CVE-2017-18922","EUVD-2017-10012","GHSA-hq8f-cpqj-qph2","RHSA-2020:3281","RHSA-2020:3385","RHSA-2020:3456","RHSA-2020:3588","SUSE-SU-2020:1873-1","SUSE-SU-2020:1922-1","SUSE-SU-2020:2167-1","UBUNTU-CVE-2017-18922","USN-4407-1","openSUSE-SU-2020:0960-1","openSUSE-SU-2020:0978-1","openSUSE-SU-2020:0988-1","openSUSE-SU-2020:1025-1","openSUSE-SU-2020:1056-1","openSUSE-SU-2024:10598-1"],"status":"published","title":"It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode...","description":"It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02259,"percentile":0.83091,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2020-06-30T11:00:01Z","modified":"2026-10-29T11:00:18Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"libvncserver-devel","fixed_in":["0.9.11-15.el8_2.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libvncserver","fixed_in":["0.9.12+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvncserver","fixed_in":["0.9.12+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvncserver","fixed_in":["0.9.12+dfsg-3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvncserver","fixed_in":["0:0.9.9-14.el7_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvncserver-debuginfo","fixed_in":["0:0.9.9-14.el7_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvncserver-devel","fixed_in":["0:0.9.9-14.el7_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvncserver","fixed_in":["0:0.9.9-14.el7_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvncserver-debuginfo","fixed_in":["0:0.9.9-14.el7_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvncserver-devel","fixed_in":["0:0.9.9-14.el7_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvncserver","fixed_in":["0:0.9.9-14.el7_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvncserver-debuginfo","fixed_in":["0:0.9.9-14.el7_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvncserver-devel","fixed_in":["0:0.9.9-14.el7_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvncserver","fixed_in":["0:0.9.11-15.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvncserver-debuginfo","fixed_in":["0:0.9.11-15.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvncserver-debugsource","fixed_in":["0:0.9.11-15.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver","fixed_in":["0:0.9.11-15.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver-debuginfo","fixed_in":["0:0.9.11-15.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver-debugsource","fixed_in":["0:0.9.11-15.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver-devel","fixed_in":["0:0.9.11-15.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libvncserver","fixed_in":["0:0.9.11-9.el8_1.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libvncserver-debuginfo","fixed_in":["0:0.9.11-9.el8_1.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libvncserver-debugsource","fixed_in":["0:0.9.11-9.el8_1.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"libvncserver","fixed_in":["0:0.9.11-9.el8_1.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"libvncserver-debuginfo","fixed_in":["0:0.9.11-9.el8_1.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"libvncserver-debugsource","fixed_in":["0:0.9.11-9.el8_1.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"libvncserver-devel","fixed_in":["0:0.9.11-9.el8_1.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libvncserver","fixed_in":["0:0.9.11-9.el8_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libvncserver-debuginfo","fixed_in":["0:0.9.11-9.el8_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libvncserver-debugsource","fixed_in":["0:0.9.11-9.el8_0.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"LibVNCServer","fixed_in":["0.9.10-4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"LibVNCServer","fixed_in":["0.9.10-4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"LibVNCServer","fixed_in":["0.9.10-4.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"LibVNCServer","fixed_in":["0.9.10-4.19.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libvncserver","fixed_in":["0.9.10+dfsg-3ubuntu0.16.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libvncserver","fixed_in":["0.9.11+dfsg-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libvncserver","fixed_in":["0.9.12+dfsg-9ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"LibVNCServer","fixed_in":["0.9.10-lp151.7.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"LibVNCServer","fixed_in":["0.9.10-lp152.9.4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.11-15.el8_2.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12+dfsg-3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-14.el7_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-14.el7_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-14.el7_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-14.el7_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-14.el7_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-14.el7_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-14.el7_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-14.el7_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.9-14.el7_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-15.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-15.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libvncserver-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-15.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-15.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-15.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-15.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-15.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-9.el8_1.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-9.el8_1.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libvncserver-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-9.el8_1.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-9.el8_1.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-9.el8_1.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"libvncserver-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-9.el8_1.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::crb","package":"libvncserver-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-9.el8_1.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-9.el8_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libvncserver-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-9.el8_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"libvncserver-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.11-9.el8_0.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-4.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-4.22.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-4.22.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-4.22.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-4.22.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-17.31.1"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"x11vnc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.13-1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10+dfsg-3ubuntu0.16.04.4"}]}],"versions":["0.9.10+dfsg-3","0.9.10+dfsg-3build1","0.9.10+dfsg-3ubuntu0.16.04.1","0.9.10+dfsg-3ubuntu0.16.04.2","0.9.10+dfsg-3ubuntu0.16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.11+dfsg-1ubuntu1.2"}]}],"versions":["0.9.11+dfsg-1","0.9.11+dfsg-1ubuntu1","0.9.11+dfsg-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12+dfsg-9ubuntu0.1"}]}],"versions":["0.9.11+dfsg-1.3","0.9.12+dfsg-3ubuntu3","0.9.12+dfsg-6","0.9.12+dfsg-7","0.9.12+dfsg-8","0.9.12+dfsg-9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"veyon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.2.4+repack1-2","4.2.5+repack1-1","4.3.1+repack1-1","4.3.1+repack1-2","4.3.1+repack1-2build1","4.3.1+repack1-2build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"veyon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.3+repack1-1build1","4.5.3+repack1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"veyon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.7.5+repack1-1build2","4.7.5+repack1-1ubuntu1","4.7.5+repack1-1ubuntu3","4.7.5+repack1-1ubuntu4","4.7.5+repack1-1ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"veyon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.7.5+repack1-1ubuntu6","4.7.5+repack1-1ubuntu7","4.9.7+repack1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"veyon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.7+repack1-1build1","4.9.7+repack1-1.1","4.9.7+repack1-1.1build1","4.9.7+repack1-1.1build2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"veyon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.7+repack1-1","4.9.7+repack1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10+dfsg-3ubuntu0.16.04.4"}]}],"versions":["0.9.10+dfsg-3","0.9.10+dfsg-3build1","0.9.10+dfsg-3ubuntu0.16.04.1","0.9.10+dfsg-3ubuntu0.16.04.2","0.9.10+dfsg-3ubuntu0.16.04.3"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.11+dfsg-1ubuntu1.2"}]}],"versions":["0.9.11+dfsg-1","0.9.11+dfsg-1ubuntu1","0.9.11+dfsg-1ubuntu1.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libvncserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12+dfsg-9ubuntu0.1"}]}],"versions":["0.9.11+dfsg-1.3","0.9.12+dfsg-3ubuntu3","0.9.12+dfsg-6","0.9.12+dfsg-7","0.9.12+dfsg-8","0.9.12+dfsg-9"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-lp151.7.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-lp152.9.4.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-lp151.7.9.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-lp152.9.8.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"LibVNCServer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.10-lp152.9.4.2"}]}],"bundled":10}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libvncserver_project","product":"libvncserver"},{"vendor":"opensuse","product":"leap"},{"vendor":"siemens","product":"simatic_itc1500_firmware"},{"vendor":"siemens","product":"simatic_itc1500_pro_firmware"},{"vendor":"siemens","product":"simatic_itc1900_firmware"},{"vendor":"siemens","product":"simatic_itc1900_pro_firmware"},{"vendor":"siemens","product":"simatic_itc2200_firmware"},{"vendor":"siemens","product":"simatic_itc2200_pro_firmware"}],"references":[{"url":"https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.openwall.com/lists/oss-security/2020/06/30/2","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1852356","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2020/06/30/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00020.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVP7TJVYJDXDFRHVQ3ENEN3H354QPXEZ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4407-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F6FUH4EFK4NAP6GT4TQRTBKWIRCZLIY/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00028.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-18922","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4F6FUH4EFK4NAP6GT4TQRTBKWIRCZLIY/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NVP7TJVYJDXDFRHVQ3ENEN3H354QPXEZ/"},{"url":"https://github.com/advisories/GHSA-hq8f-cpqj-qph2"},{"url":"https://vulners.com/cve/CVE-2017-18922","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-18922","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3281","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3281.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-18922","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-18922","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3385","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3385.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3456","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3456.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3588","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3588.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201873-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173477","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18922","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201922-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173691","tags":["report"]},{"url":"https://bugzilla.suse.com/1173694","tags":["report"]},{"url":"https://bugzilla.suse.com/1173700","tags":["report"]},{"url":"https://bugzilla.suse.com/1173701","tags":["report"]},{"url":"https://bugzilla.suse.com/1173743","tags":["report"]},{"url":"https://bugzilla.suse.com/1173874","tags":["report"]},{"url":"https://bugzilla.suse.com/1173875","tags":["report"]},{"url":"https://bugzilla.suse.com/1173876","tags":["report"]},{"url":"https://bugzilla.suse.com/1173880","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-21247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14402","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202167-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14404","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-18922","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4407-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-15680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15681","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15690","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-20788","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MGU2UORVOE54ROZM7L4AJ52OHI4TXPIE/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BHW55DN53AINCCLG5CRY5VTFMFBMAJWZ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RH2MWYCQ3Y7WV6I2GEEBEI2J57NGY36J/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MRXTN4MBX2MAHYVC2KCQATTKYECU2TZT/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MWRQ72I3AY52E4KTKKWCJGWKFGVHI5FP/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25708","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-18922","description":"It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.","status":"published","published":"2020-06-30T11:00:01Z","modified":"2024-08-05T21:45:24.57Z","updated_at":"2026-11-02T14:33:21.747294Z"}],"euvd":[{"id":"EUVD-2017-10012","description":"It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.","status":"published","published":"2020-06-30T11:00:01Z","modified":"2024-08-05T21:45:24Z","updated_at":"2026-11-03T02:23:04.612289Z"}],"ghsa":[{"id":"GHSA-hq8f-cpqj-qph2","title":"It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode...","description":"It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.","status":"published","published":"2022-05-24T17:22:04Z","modified":"2023-01-29T05:03:14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:45:16.618773Z"}],"nvd":[{"id":"CVE-2017-18922","description":"It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.","status":"published","published":"2020-06-30T11:15:10.38Z","modified":"2026-06-17T01:13:50.19Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:21.160774Z"}],"osv":[{"id":"CVE-2017-18922","description":"It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.","status":"published","published":"2020-06-30T11:15:10.38Z","modified":"2026-10-20T10:48:17.655264551Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-18922","description":"It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.","status":"published","published":"2020-06-30T11:15:10.38Z","modified":"2026-09-01T20:02:53.328075145Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"RHSA-2020:3281","title":"Red Hat Security Advisory: libvncserver security update","status":"published","published":"2024-09-16T04:39:19Z","modified":"2026-06-26T10:49:41Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:3385","title":"Red Hat Security Advisory: libvncserver security update","status":"published","published":"2024-09-16T04:39:28Z","modified":"2026-06-26T12:21:58.278356527Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:3456","title":"Red Hat Security Advisory: libvncserver security update","status":"published","published":"2024-09-16T04:39:35Z","modified":"2026-06-26T12:22:26.15485017Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:3588","title":"Red Hat Security Advisory: libvncserver security update","status":"published","published":"2024-09-16T04:39:41Z","modified":"2025-11-22T12:07:10Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2017-18922","description":"It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.","status":"published","published":"2020-06-30T11:15:00Z","modified":"2026-10-17T12:53:19.699304506Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"ALSA-2020:3385","title":"Important: libvncserver security update","description":"LibVNCServer is a C library that enables you to implement VNC server functionality into own programs.\n\nSecurity Fix(es):\n\n* libvncserver: websocket decoding buffer overflow (CVE-2017-18922)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2020-08-10T13:51:34Z","modified":"2026-10-29T11:00:18.984929831Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"openSUSE-SU-2020:0960-1","title":"Security update for LibVNCServer","description":"This update for LibVNCServer fixes the following issues:\n\n- CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer \n  which subsequently used leading to potential remote code execution (bsc#1173477).\t  \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-07-14T04:27:36Z","modified":"2026-02-04T03:36:34.123622Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0978-1","title":"Security update for LibVNCServer","description":"This update for LibVNCServer fixes the following issues:\n\n- CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer \n  which subsequently used leading to potential remote code execution (bsc#1173477).\t  \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-07-17T16:29:39Z","modified":"2026-02-04T03:59:59.290618Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0988-1","title":"Security update for LibVNCServer","description":"This update for LibVNCServer fixes the following issues:\n\n- security update\n- added patches\n  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak\n  + LibVNCServer-CVE-2018-21247.patch\n  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()\n  + LibVNCServer-CVE-2019-20839.patch\n  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service\n  + LibVNCServer-CVE-2019-20840.patch\n  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c\n  + LibVNCServer-CVE-2020-14398.patch\n  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c\n  + LibVNCServer-CVE-2020-14397.patch\n  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.\n  + LibVNCServer-CVE-2020-14399.patch\n  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.\n  + LibVNCServer-CVE-2020-14400.patch\n  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c\n  + LibVNCServer-CVE-2020-14401.patch\n  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.\n  + LibVNCServer-CVE-2020-14402,14403,14404.patch\n  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-07-18T12:27:09Z","modified":"2026-02-04T02:53:39.671564Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:1025-1","title":"Security update for LibVNCServer","description":"This update for LibVNCServer fixes the following issues:\n\n- security update\n- added patches\n  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak\n  + LibVNCServer-CVE-2018-21247.patch\n  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()\n  + LibVNCServer-CVE-2019-20839.patch\n  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service\n  + LibVNCServer-CVE-2019-20840.patch\n  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c\n  + LibVNCServer-CVE-2020-14398.patch\n  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c\n  + LibVNCServer-CVE-2020-14397.patch\n  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.\n  + LibVNCServer-CVE-2020-14399.patch\n  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.\n  + LibVNCServer-CVE-2020-14400.patch\n  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c\n  + LibVNCServer-CVE-2020-14401.patch\n  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.\n  + LibVNCServer-CVE-2020-14402,14403,14404.patch\n  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-07-21T08:27:26Z","modified":"2026-02-04T02:38:47.939233Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1056-1","title":"Security update for LibVNCServer","description":"This update for LibVNCServer fixes the following issues:\n\n- security update\n- added patches\n  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak\n  + LibVNCServer-CVE-2018-21247.patch\n  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()\n  + LibVNCServer-CVE-2019-20839.patch\n  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service\n  + LibVNCServer-CVE-2019-20840.patch\n  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c\n  + LibVNCServer-CVE-2020-14398.patch\n  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c\n  + LibVNCServer-CVE-2020-14397.patch\n  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.\n  + LibVNCServer-CVE-2020-14399.patch\n  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.\n  + LibVNCServer-CVE-2020-14400.patch\n  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c\n  + LibVNCServer-CVE-2020-14401.patch\n  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.\n  + LibVNCServer-CVE-2020-14402,14403,14404.patch\n  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-07-24T12:20:15Z","modified":"2026-02-04T02:28:13.003232Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10598-1","title":"LibVNCServer-devel-0.9.13-3.1 on GA media","description":"These are all security issues fixed in the LibVNCServer-devel-0.9.13-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:15:49.041318Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:1873-1","title":"Security update for LibVNCServer","description":"This update for LibVNCServer fixes the following issues:\n\n- CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer \n  which subsequently used leading to potential remote code execution (bsc#1173477).\t  \n","status":"published","published":"2020-07-07T15:20:05Z","modified":"2026-02-04T03:28:28.545852Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1922-1","title":"Security update for LibVNCServer","description":"This update for LibVNCServer fixes the following issues:\n\n- security update\n- added patches\n  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak\n  + LibVNCServer-CVE-2018-21247.patch\n  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()\n  + LibVNCServer-CVE-2019-20839.patch\n  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service\n  + LibVNCServer-CVE-2019-20840.patch\n  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c\n  + LibVNCServer-CVE-2020-14398.patch\n  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c\n  + LibVNCServer-CVE-2020-14397.patch\n  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.\n  + LibVNCServer-CVE-2020-14399.patch\n  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.\n  + LibVNCServer-CVE-2020-14400.patch\n  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c\n  + LibVNCServer-CVE-2020-14401.patch\n  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.\n  + LibVNCServer-CVE-2020-14402,14403,14404.patch\n  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite\n","status":"published","published":"2020-07-15T09:31:09Z","modified":"2026-02-04T02:30:28.532499Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:2167-1","title":"Security update for LibVNCServer","description":"This update for LibVNCServer fixes the following issues:\n\n- security update\n  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak\n  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()\n  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service\n  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c\n  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c\n  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.\n  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.\n  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c\n  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.\n  fix CVE-2020-14403 [bsc#1173701], out-of-bounds access via encodings.\n  fix CVE-2020-14404 [bsc#1173701], out-of-bounds access via encodings.\n  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite\n","status":"published","published":"2020-08-07T12:54:44Z","modified":"2026-02-04T02:41:32.568422Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-4407-1","title":"libvncserver vulnerabilities","description":"It was discovered that LibVNCServer incorrectly handled decompressing data. An\nattacker could possibly use this issue to cause LibVNCServer to crash,\nresulting in a denial of service. (CVE-2019-15680)\n\nIt was discovered that an information disclosure vulnerability existed in\nLibVNCServer when sending a ServerCutText message. An attacker could possibly\nuse this issue to expose sensitive information. This issue only affected\nUbuntu 19.10, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS. (CVE-2019-15681)\n\nIt was discovered that LibVNCServer incorrectly handled cursor shape updates.\nIf a user were tricked in to connecting to a malicious server, an attacker\ncould possibly use this issue to cause LibVNCServer to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 19.10, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS.\n(CVE-2019-15690, CVE-2019-20788)\n\nIt was discovered that LibVNCServer incorrectly handled decoding WebSocket\nframes. An attacker could possibly use this issue to cause LibVNCServer to\ncrash, resulting in a denial of service, or possibly execute arbitrary code.\nThis issue only affected Ubuntu 19.10, Ubuntu 18.04 LTS, and Ubuntu 16.04 LTS.\n(CVE-2017-18922)\n","status":"published","published":"2020-07-01T23:44:41Z","modified":"2026-04-27T15:39:05.015501Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}