< back to search

critical Security update for libvncserver

SUSE-SLE-SERVER-12-2019-313

This update for LibVNCServer fixes the following issues: Security issues fixed: - CVE-2018-20749: Fixed a heap out of bounds write vulnerability in rfbserver.c (bsc#1123828) - CVE-2018-20750: Fixed a heap out of bounds write vulnerability in rfbserver.c (bsc#1123832) - CVE-2018-20748: Fixed multiple heap out-of-bound writes in VNC client code (bsc#1123823)

Release Date

Feb 9 2019
References

Bugzilla: 1123828, 1123832, 1123823
CVEs: CVE-2018-20749, CVE-2018-20748, CVE-2018-20750
Type

security
Severity

critical

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server LTSS 12 s390x

Packages

LibVNCServer
VNC Development Library

0.9.9-17.11.1 lock src

libvncclient0
Library implementing a VNC client

0.9.9-17.11.1 lock rpm

libvncserver0
Library implementing a VNC server

0.9.9-17.11.1 lock rpm

SUSE Linux Enterprise Server LTSS 12 x86_64

Packages

LibVNCServer
VNC Development Library

0.9.9-17.11.1 lock src

libvncclient0
Library implementing a VNC client

0.9.9-17.11.1 lock rpm

libvncserver0
Library implementing a VNC server

0.9.9-17.11.1 lock rpm