ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-21247

—
CVSS 3.1
7.5 high
EPSS
2%p83
Published
()
Modified
Description

An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.

Vendors
libvnc projectcanonicaldebiansiemensopensuse
Products
libvncserver, ubuntu linux, debian linux, simatic itc1500 firmware, simatic itc1500 pro firmware, simatic itc1900 firmware, simatic itc1900 pro firmware, simatic itc2200 firmware, simatic itc2200 pro firmware, leap
Weakness
CWE-909
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news

No ingested article mentions this CVE yet.