deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-20123
Published: 2018-12-17
Description: pvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://www.openwall.com/lists/oss-security/2018/12/13/4; http://www.securityfocus.com/bid/106219; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7/
CVE: CVE-2018-20184
Published: 2018-12-17
Description: In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA specification.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/15d1b5fd003b; http://www.securityfocus.com/bid/106229; https://lists.debian.org/debian-lts-announce/2018/12/msg00018.html
CVE: CVE-2018-20185
Published: 2018-12-17
Description: In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/648e3977a293; http://www.securityfocus.com/bid/106229; https://lists.debian.org/debian-lts-announce/2018/12/msg00018.html
CVE: CVE-2018-20186
Published: 2018-12-17
Description: An issue was discovered in Bento4 1.5.1-627. AP4_Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4_DataBuffer::SetDataSize and AP4_DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/axiomatic-systems/Bento4/issues/342; https://github.com/axiomatic-systems/Bento4/issues/342
CVE: CVE-2018-20188
Published: 2018-12-17
Description: FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/m3lon/CVE/blob/master/CSRF/FUELCMS%20CSRF.md; https://github.com/m3lon/CVE/blob/master/CSRF/FUELCMS%20CSRF.md
CVE: CVE-2018-20189
Published: 2018-12-17
Description: In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping (which is not available beyond 8-bits/sample), and therefore lacks indexes initialization.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/648e2b406589; http://www.securityfocus.com/bid/106227; https://lists.debian.org/debian-lts-announce/2018/12/msg00018.html
CVE: CVE-2018-20190
Published: 2018-12-17
Description: In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial of Service (application crash) via a crafted sass input file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2018-11795
Published: 2018-12-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Notes: none
CVE: CVE-2018-7797
Published: 2018-12-17
Description: A URL redirection vulnerability exists in Power Monitoring Expert, Energy Expert (formerly Power Manager) - EcoStruxure Power Monitoring Expert (PME) v8.2 (all editions), EcoStruxure Energy Expert 1.3 (formerly Power Manager), EcoStruxure Power SCADA Operation (PSO) 8.2 Advanced Reports and Dashboards Module, EcoStruxure Power Monitoring Expert (PME) v9.0, EcoStruxure Energy Expert v2.0, and EcoStruxure Power SCADA Operation (PSO) 9.0 Advanced Reports and Dashboards Module which could cause a phishing attack when redirected to a malicious site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/106277; https://www.schneider-electric.com/en/download/document/SEVD-2018-347-01/; http://www.securityfocus.com/bid/106277
CVE: CVE-2018-7804
Published: 2018-12-17
Description: A URL Redirection to Untrusted Site vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a user clicking on a specially crafted link can be redirected to a URL of the attacker's choosing.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE: CVE-2018-7812
Published: 2018-12-17
Description: An Information Exposure through Discrepancy vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where the web server sends different responses in a way that exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/SadFud/Exploits/tree/master/Real%20World/SCADA%20-%20IOT%20Systems/CVE-2018-7812; https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/; https://github.com/SadFud/Exploits/tree/master/Real%20World/SCADA%20-%20IOT%20Systems/CVE-2018-7812
CVE: CVE-2018-7833
Published: 2018-12-17
Description: An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/; https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE: CVE-2018-20194
Published: 2018-12-18
Description: There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy level is mishandled for the G_max <= G case.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/knik0/faad2/issues/21; https://lists.debian.org/debian-lts-announce/2019/05/msg00022.html; https://seclists.org/bugtraq/2019/Sep/28
CVE: CVE-2018-20195
Published: 2018-12-18
Description: A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/knik0/faad2/issues/25; https://seclists.org/bugtraq/2019/Sep/28; https://security.gentoo.org/glsa/202006-17
CVE: CVE-2018-20196
Published: 2018-12-18
Description: There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because the S_M array is mishandled.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/knik0/faad2/issues/19; https://lists.debian.org/debian-lts-announce/2019/08/msg00033.html; https://security.gentoo.org/glsa/202006-17
CVE: CVE-2018-20197
Published: 2018-12-18
Description: There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy level is mishandled for the G_max > G case.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/knik0/faad2/issues/20; https://lists.debian.org/debian-lts-announce/2019/05/msg00022.html; https://seclists.org/bugtraq/2019/Sep/28
CVE: CVE-2018-20198
Published: 2018-12-18
Description: A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the LONG_START_SEQUENCE case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/knik0/faad2/issues/23; https://lists.debian.org/debian-lts-announce/2019/05/msg00022.html; https://seclists.org/bugtraq/2019/Sep/28
CVE: CVE-2018-20199
Published: 2018-12-18
Description: A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the ONLY_LONG_SEQUENCE case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/knik0/faad2/issues/24; https://lists.debian.org/debian-lts-announce/2019/08/msg00033.html; https://lists.debian.org/debian-lts-announce/2021/10/msg00020.html
CVE: CVE-2018-20201
Published: 2018-12-18
Description: There is a stack-based buffer over-read in the jsfNameFromString function of jsflash.c in Espruino 2V00, leading to a denial of service or possibly unspecified other impact via a crafted js file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/espruino/Espruino/issues/1587; https://github.com/espruino/Espruino/issues/1587
CVE: CVE-2018-4015
Published: 2018-12-18
Description: An exploitable vulnerability exists in the HTTP client functionality of the Webroot BrightCloud SDK. The configuration of the HTTP client does not enforce a secure connection by default, resulting in a failure to validate TLS certificates. An attacker could impersonate a remote BrightCloud server to exploit this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0686; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0686
CVE: CVE-2018-1833
Published: 2018-12-18
Description: IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has already gained authorised access via the CLI, could exploit this vulnerability to spoof the request header. IBM X-Force ID: 150507.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/106330; https://exchange.xforce.ibmcloud.com/vulnerabilities/150507; https://www.ibm.com/support/docview.wss?uid=ibm10787535
CVE: CVE-2017-15031
Published: 2018-12-18
Description: In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCR_EL0 register can leak secure world timing information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106271; https://github.com/ARM-software/arm-trusted-firmware/wiki/ARM-Trusted-Firmware-Security-Advisory-TFV-5; http://www.securityfocus.com/bid/106271
CVE: CVE-2018-19522
Published: 2018-12-18
Description: DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x800020F4) with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for partial input.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-20213
Published: 2018-12-18
Description: wbook_addworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service (SEGV) via a long name. NOTE: this is not a Microsoft product.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/devinsmith/libexcel/issues/8; https://github.com/devinsmith/libexcel/issues/8
CVE: CVE-2018-6978
Published: 2018-12-18
Description: vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vulnerability due to improper permissions of support scripts. Admin user of the vROps application with shell access may exploit this issue to elevate the privileges to root on a vROps machine. Note: the admin user (non-sudoer) should not be confused with root of the vROps machine.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/106242; https://www.vmware.com/security/advisories/VMSA-2018-0031.html; http://www.securityfocus.com/bid/106242
CVE: CVE-2018-16884
Published: 2018-12-18
Description: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.
CVSS Score: 8.0 (HIGH)
CWE: CWE-416, CWE-416
References: http://www.securityfocus.com/bid/106253; https://access.redhat.com/errata/RHSA-2019:1873; https://access.redhat.com/errata/RHSA-2019:1891
CVE: CVE-2018-17777
Published: 2018-12-18
Description: An issue was discovered on D-Link DVA-5592 A1_WI_20180823 devices. If the PIN of the page "/ui/cbpc/login" is the default Parental Control PIN (0000), it is possible to bypass the login form by editing the path of the cookie "sid" generated by the page. The attacker will have access to the router control panel with administrator privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.gubello.me/blog/router-dlink-dva-5592-authentication-bypass/; https://www.gubello.me/blog/router-dlink-dva-5592-authentication-bypass/
CVE: CVE-2018-18921
Published: 2018-12-18
Description: PHP Server Monitor before 3.3.2 has CSRF, as demonstrated by a Delete action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/phpservermon/phpservermon/issues/670; https://medium.com/bugbountywriteup/cve-2018-18921-php-server-monitor-3-3-1-cross-site-request-forgery-a73e8dae563; https://github.com/phpservermon/phpservermon/issues/670
CVE: CVE-2018-19789
Published: 2018-12-18
Description: An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1. When using the scalar type hint `string` in a setter method (e.g. `setName(string $name)`) of a class that's the `data_class` of a form, and when a file upload is submitted to the corresponding field instead of a normal text input, then `UploadedFile::__toString()` is called which will then return and disclose the path of the uploaded file. If combined with a local file inclusion issue in certain circumstances this could escalate it to a Remote Code Execution.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-434
References: http://www.securityfocus.com/bid/106249; https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TD3E7FZIXLVFG3SMFJPDEKPZ26TJOW7/
CVE: CVE-2018-19790
Published: 2018-12-18
Description: An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restrictions and effectively redirect the user to any domain after login.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/106249; https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4TD3E7FZIXLVFG3SMFJPDEKPZ26TJOW7/
CVE: CVE-2018-19829
Published: 2018-12-18
Description: Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary user when the ID number is known.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://hackpuntes.com/cve-2018-19829-integria-ims-5-0-83-cross-site-request-forgery/; https://www.exploit-db.com/exploits/46013/; https://hackpuntes.com/cve-2018-19829-integria-ims-5-0-83-cross-site-request-forgery/
CVE: CVE-2018-20227
Published: 2018-12-19
Description: RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/eclipse/rdf4j/issues/1210; https://github.com/eclipse/rdf4j/pull/1211/commits/df15a4d7a8f2789c043b27c9eafe1b30316cfa79; https://github.com/eclipse/rdf4j/issues/1210
CVE: CVE-2018-20228
Published: 2018-12-19
Description: Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352, CWE-918
References: https://www.vulnerability-lab.com/get_content.php?id=2175; https://www.vulnerability-lab.com/get_content.php?id=2175
CVE: CVE-2018-20230
Published: 2018-12-19
Description: An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1660318; https://bugzilla.redhat.com/show_bug.cgi?id=1660318
CVE: CVE-2018-20231
Published: 2018-12-19
Description: Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce validation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/two-factor-authentication/#developers; https://wpvulndb.com/vulnerabilities/9187; https://www.privacy-wise.com/two-factor-authentication-cross-site-request-forgery-csrf-vulnerability-cve-2018-20231/
CVE: CVE-2018-16883
Published: 2018-12-19
Description: sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user directory, this could be inadvertently disclosed to local attackers.
CVSS Score: 2.5 (LOW)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/106264; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16883; http://www.securityfocus.com/bid/106264
CVE: CVE-2018-17192
Published: 2018-12-19
Description: The X-Frame-Options headers were applied inconsistently on some HTTP responses, resulting in duplicate or missing security headers. Some browsers would interpret these results incorrectly, allowing clickjacking attacks. Mitigation: The fix to consistently apply the security headers was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1021
References: https://nifi.apache.org/security.html#CVE-2018-17192; https://nifi.apache.org/security.html#CVE-2018-17192
CVE: CVE-2018-17193
Published: 2018-12-19
Description: The message-page.jsp error page used the value of the HTTP request header X-ProxyContextPath without sanitization, resulting in a reflected XSS attack. Mitigation: The fix to correctly parse and sanitize the request attribute value was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://nifi.apache.org/security.html#CVE-2018-17193; https://nifi.apache.org/security.html#CVE-2018-17193
CVE: CVE-2018-17194
Published: 2018-12-19
Description: When a client request to a cluster node was replicated to other nodes in the cluster for verification, the Content-Length was forwarded. On a DELETE request, the body was ignored, but if the initial request had a Content-Length value other than 0, the receiving nodes would wait for the body and eventually timeout. Mitigation: The fix to check DELETE requests and overwrite non-zero Content-Length header values was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://nifi.apache.org/security.html#CVE-2018-17194; https://nifi.apache.org/security.html#CVE-2018-17194
CVE: CVE-2018-17195
Published: 2018-12-19
Description: The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle (MiTM) attack, resulting in a CSRF attack. The required attack vector is complex, requiring a scenario with client certificate authentication, same subnet access, and injecting malicious code into an unprotected (plaintext HTTP) website which the targeted user later visits, but the possible damage warranted a Severe severity level. Mitigation: The fix to apply Cross-Origin Resource Sharing (CORS) policy request filtering was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-863
References: https://nifi.apache.org/security.html#CVE-2018-17195; https://nifi.apache.org/security.html#CVE-2018-17195
CVE: CVE-2018-15126
Published: 2018-12-19
Description: LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-027-libvnc-heap-use-after-free/; https://lists.debian.org/debian-lts-announce/2019/01/msg00029.html; https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
CVE: CVE-2018-15127
Published: 2018-12-19
Description: LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2019:0059; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-028-libvnc-heap-out-of-bound-write/; https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html
CVE: CVE-2018-20019
Published: 2018-12-19
Description: LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-029-libvnc-multiple-heap-out-of-bound-vulnerabilities/; https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html
CVE: CVE-2018-20020
Published: 2018-12-19
Description: LibVNC before commit 7b1ef0ffc4815cab9a96c[PII_REDACTED]bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client code that can result remote code execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-030-libvnc-heap-out-of-bound-write/; https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html; https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html