ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-20021

—
CVSS 3.0
7.5 high
EPSS
4%p89
Published
()
Modified
Description

LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker to consume excessive amount of resources like CPU and RAM

Vendors
libvnc projectcanonicaldebian
Products
libvncserver, ubuntu linux, debian linux
Weakness
CWE-835
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news

No ingested article mentions this CVE yet.