Description
LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a LibVNC
commit 73cb96fec028a576a5a24417b57723b55854ad7baffected
References
- https://lists.debian.org/debian-lts-announce/2019/01/msg00029.html ↗
- https://www.debian.org/security/2019/dsa-4383 ↗
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-027-libvnc-heap-use-after-free/ ↗
- https://usn.ubuntu.com/3877-1/ ↗
- https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html ↗