tocsin

Debian/libvncserver: critical 9.8

LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.

Action: Upgrade libvncserver to 0.9.11+dfsg-1.3 or later.

Affected

introducedfixedlast affected
00.9.11+dfsg-1.3-

Fixed versions

0.9.11+dfsg-1.3

Sources

published · modified · JSON