CVE-2018-21247

🗓️ 17 Jun 2020 16:15:11Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 17 Views

Information leak in LibVNCServer before version 0.9.1

Reporter	Title	Published	Views	Family All 72
Tenable Nessus	AlmaLinux 8 : libvncserver (ALSA-2021:1811)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : libvncserver (CESA-2021:1811)	19 May 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : libvncserver (EulerOS-SA-2020-1811)	30 Jul 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : libvncserve (EulerOS-SA-2020-1940)	2 Sep 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : libvncserver (EulerOS-SA-2020-2116)	28 Sep 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : libvncserver (EulerOS-SA-2020-2362)	3 Nov 202000:00	–	nessus
Tenable Nessus	Fedora 32 : libvncserver (2020-1a4b1c8271)	16 Jul 202000:00	–	nessus
Tenable Nessus	Fedora 31 : libvncserver (2020-37112ac660)	15 Jul 202000:00	–	nessus
Tenable Nessus	MiracleLinux 8 : libvncserver-0.9.11-17.el8 (AXSA:2021-2098:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 6.02 : libvncserver Multiple Vulnerabilities (NS-SA-2022-0048)	9 May 202200:00	–	nessus

NVD

Node

libvnc_project libvncserverRange≤0.9.12

Node

OR

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04esm

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch18.10

Node

OR

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

AND

siemens simatic_itc1500_firmwareRange3.0.0.0–3.2.1.0

siemens simatic_itc1500Match-

Node

AND

siemens simatic_itc1500_pro_firmwareRange3.0.0.0–3.2.1.0

siemens simatic_itc1500_proMatch-

Node

AND

siemens simatic_itc1900_firmwareRange3.0.0.0–3.2.1.0

siemens simatic_itc1900Match-

Node

AND

siemens simatic_itc1900_pro_firmwareRange3.0.0.0–3.2.1.0

siemens simatic_itc1900_proMatch-

Node

AND

siemens simatic_itc2200_firmwareRange3.0.0.0–3.2.1.0

siemens simatic_itc2200Match-

Node

AND

siemens simatic_itc2200_pro_firmwareRange3.0.0.0–3.2.1.0

siemens simatic_itc2200_proMatch-

Node

opensuse leapMatch15.2

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00055.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVP7TJVYJDXDFRHVQ3ENEN3H354QPXEZ/
github	www.github.com/LibVNC/libvncserver/compare/LibVNCServer-0.9.12...LibVNCServer-0.9.13
github	www.github.com/LibVNC/libvncserver/issues/253
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F6FUH4EFK4NAP6GT4TQRTBKWIRCZLIY/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html

17 Jun 2026 01:54Current

CVSS 25

CVSS 3.17.5

EPSS0.02358

libvncserver information leak memory contents vulnerability