Memory leak in LibVNCServer - CVE-2018-21247

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU29384

Memory leak in LibVNCServer - CVE-2018-21247

Published: June 30, 2020


Vulnerability identifier: #VU29384
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-21247
CWE-ID: CWE-401
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due memory leak within the ConnectToRFBRepeater() function in  libvncclient/rfbproto.c. A remote attacker can trick the victim to connect to a malicious VNC server, trigger the memory leak and gain access to sensitive information on the client's system.


Affected software

LibVNCServer
libvncserver (Red Hat package)
libvncserver
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Opensuse
Fedora
SIMATIC ITC2200 PRO
SIMATIC ITC2200
SIMATIC ITC1900 PRO
SIMATIC ITC1900
SIMATIC ITC1500 PRO
SIMATIC ITC1500

How to mitigate CVE-2018-21247

Install updates from vendor's website.

LibVNCServer - update to 0.9.13
libvncserver (Red Hat package) - update to 0.9.11-17.el8
SIMATIC ITC2200 PRO - update to
libvncserver - addressed in versions 0.9.13-2.fc31, 0.9.13-2.fc32
SIMATIC ITC2200 PRO - update to 3.2.1.0
SIMATIC ITC2200 - update to 3.2.1.0
SIMATIC ITC1900 PRO - update to 3.2.1.0
SIMATIC ITC1900 - update to 3.2.1.0
SIMATIC ITC1500 PRO - update to 3.2.1.0
SIMATIC ITC1500 - update to 3.2.1.0

External References

Related Security Bulletins