CVEvulnerability
CVE-2018-7225
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-02-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-190
Description
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.
Affected configurations
• libvncserver project libvncserver (<= 0.9.11)
• debian debian linux 7.0
• debian debian linux 8.0
• debian debian linux 9.0
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 17.10
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 7.6
• redhat enterprise linux server eus 7.5
• redhat enterprise linux server eus 7.6
• redhat enterprise linux server tus 7.6
• redhat enterprise linux workstation 7.0
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- http://www.openwall.com/lists/oss-security/2018/02/18/1 Exploit, Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/103107 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1055 Third Party Advisory
- https://github.com/LibVNC/libvncserver/issues/218 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/03/msg00035.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2019/11/msg00032.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html lists.debian.org
- https://security.gentoo.org/glsa/201908-05 security.gentoo.org
- https://usn.ubuntu.com/3618-1/ Third Party Advisory
- https://usn.ubuntu.com/4547-1/ usn.ubuntu.com
- https://usn.ubuntu.com/4573-1/ usn.ubuntu.com
- https://usn.ubuntu.com/4587-1/ usn.ubuntu.com
- https://www.debian.org/security/2018/dsa-4221 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2018/02/18/1 Exploit, Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/103107 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1055 Third Party Advisory
- https://github.com/LibVNC/libvncserver/issues/218 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/03/msg00035.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2019/11/msg00032.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html lists.debian.org
- https://security.gentoo.org/glsa/201908-05 security.gentoo.org
- https://usn.ubuntu.com/3618-1/ Third Party Advisory
- https://usn.ubuntu.com/4547-1/ usn.ubuntu.com
- https://usn.ubuntu.com/4573-1/ usn.ubuntu.com
- https://usn.ubuntu.com/4587-1/ usn.ubuntu.com
- https://www.debian.org/security/2018/dsa-4221 Third Party Advisory