alpine · CVE-2018-20750

Quick triage

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2018-20750: 1 source package rows (libvncserver); 7 state rows across 3 repos (3.11-main, 3.22-community, edge-community); fixed 0, open 7.

Description:

LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.