openSUSE-SU-2019:0045-1
Security update for LibVNCServer
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-15126: Fixed use-after-free in file transfer extension (bsc#1120114) - CVE-2018-6307: Fixed use-after-free in file transfer extension server code (bsc#1120115) - CVE-2018-20020: Fixed heap out-of-bound write inside structure in VNC client code (bsc#1120116) - CVE-2018-15127: Fixed heap out-of-bounds write in rfbserver.c (bsc#1120117) - CVE-2018-20019: Fixed multiple heap out-of-bound writes in VNC client code (bsc#1120118) - CVE-2018-20023: Fixed information disclosure through improper initialization in VNC Repeater client code (bsc#1120119) - CVE-2018-20022: Fixed information disclosure through improper initialization in VNC client code (bsc#1120120) - CVE-2018-20024: Fixed NULL pointer dereference in VNC client code (bsc#1120121) - CVE-2018-20021: Fixed infinite loop in VNC client code (bsc#1120122) This update was imported from the SUSE:SLE-12:Update update project.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 42.3 | LibVNCServer, LibVNCServer-devel, libvncclient0 y 2 más | 0.9.9-16.6.1 |
Mostrar las 5 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 42.3 | LibVNCServer | 0.9.9-16.6.1 |
| openSUSE Leap 42.3 | LibVNCServer-devel | 0.9.9-16.6.1 |
| openSUSE Leap 42.3 | libvncclient0 | 0.9.9-16.6.1 |
| openSUSE Leap 42.3 | libvncserver0 | 0.9.9-16.6.1 |
| openSUSE Leap 42.3 | linuxvnc | 0.9.9-16.6.1 |