CVE-2018-20019
Debian Security Advisory 4383-1
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution
LibVNC antes del commit con ID a83439b9fbe0f03c48eb94ed05729cb016f8b72f contiene múltiples vulnerabilidades de escritura de memoria dinámica (heap) fuera de límites en el código del cliente VNC que pueden resultar en la ejecución remota de código.
Nicolas Ruff discovered that iTALC had buffer overflows, divide-by-zero errors and didn't check malloc return values. A remote attacker could use these issues to cause a denial of service or possibly execute arbitrary code. Josef Gajdusek discovered that iTALC had heap-based buffer overflow vulnerabilities. A remote attacker could used these issues to cause a denial of service or possibly execute arbitrary code. Various other issues were also addressed.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-12-10 CVE Reserved
- 2018-12-19 CVE Published
- 2024-08-05 CVE Updated
- 2025-04-01 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (9)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf | 2022-03-31 |
| URL | Date | SRC |
|---|---|---|
| https://security.gentoo.org/glsa/201908-05 | 2022-03-31 | |
| https://usn.ubuntu.com/3877-1 | 2022-03-31 | |
| https://usn.ubuntu.com/4547-1 | 2022-03-31 | |
| https://usn.ubuntu.com/4587-1 | 2022-03-31 | |
| https://www.debian.org/security/2019/dsa-4383 | 2022-03-31 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Siemens Search vendor "Siemens" | Simatic Itc1500 Firmware Search vendor "Siemens" for product "Simatic Itc1500 Firmware" | >= 3.0.0.0 < 3.2.1.0 Search vendor "Siemens" for product "Simatic Itc1500 Firmware" and version " >= 3.0.0.0 < 3.2.1.0" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Itc1500 Search vendor "Siemens" for product "Simatic Itc1500" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Itc1500 Pro Firmware Search vendor "Siemens" for product "Simatic Itc1500 Pro Firmware" | >= 3.0.0.0 < 3.2.1.0 Search vendor "Siemens" for product "Simatic Itc1500 Pro Firmware" and version " >= 3.0.0.0 < 3.2.1.0" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Itc1500 Pro Search vendor "Siemens" for product "Simatic Itc1500 Pro" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Itc1900 Firmware Search vendor "Siemens" for product "Simatic Itc1900 Firmware" | >= 3.0.0.0 < 3.2.1.0 Search vendor "Siemens" for product "Simatic Itc1900 Firmware" and version " >= 3.0.0.0 < 3.2.1.0" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Itc1900 Search vendor "Siemens" for product "Simatic Itc1900" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Itc1900 Pro Firmware Search vendor "Siemens" for product "Simatic Itc1900 Pro Firmware" | >= 3.0.0.0 < 3.2.1.0 Search vendor "Siemens" for product "Simatic Itc1900 Pro Firmware" and version " >= 3.0.0.0 < 3.2.1.0" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Itc1900 Pro Search vendor "Siemens" for product "Simatic Itc1900 Pro" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Itc2200 Firmware Search vendor "Siemens" for product "Simatic Itc2200 Firmware" | >= 3.0.0.0 < 3.2.1.0 Search vendor "Siemens" for product "Simatic Itc2200 Firmware" and version " >= 3.0.0.0 < 3.2.1.0" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Itc2200 Search vendor "Siemens" for product "Simatic Itc2200" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic Itc2200 Pro Firmware Search vendor "Siemens" for product "Simatic Itc2200 Pro Firmware" | >= 3.0.0.0 < 3.2.1.0 Search vendor "Siemens" for product "Simatic Itc2200 Pro Firmware" and version " >= 3.0.0.0 < 3.2.1.0" | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic Itc2200 Pro Search vendor "Siemens" for product "Simatic Itc2200 Pro" | - | - |
Safe
|
| Libvnc Project Search vendor "Libvnc Project" | Libvncserver Search vendor "Libvnc Project" for product "Libvncserver" | < 0.9.12 Search vendor "Libvnc Project" for product "Libvncserver" and version " < 0.9.12" | - |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 14.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 16.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "16.04" | esm |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 16.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "16.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 18.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "18.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 18.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "18.10" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0" | - |
Affected
| ||||||