Test Kennung:	1.3.6.1.4.1.25623.1.0.891332
Kategorie:	Debian Local Security Checks
Titel:	Debian LTS: Security Advisory for libvncserver (DLA-1332-1)
Zusammenfassung:	libvncserver version through 0.9.11. does not sanitize msg.cct.length;which may result in access to uninitialized and potentially sensitive;data or possibly unspecified other impact (e.g., an integer overflow);via specially crafted VNC packets.
Beschreibung:	Summary: libvncserver version through 0.9.11. does not sanitize msg.cct.length which may result in access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets. Affected Software/OS: libvncserver on Debian Linux Solution: For Debian 7 'Wheezy', these problems have been fixed in version 0.9.9+dfsg-1+deb7u3. We recommend that you upgrade your libvncserver packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7225 BugTraq ID: 103107 http://www.securityfocus.com/bid/103107 Debian Security Information: DSA-4221 (Google Search) https://www.debian.org/security/2018/dsa-4221 https://security.gentoo.org/glsa/201908-05 http://www.openwall.com/lists/oss-security/2018/02/18/1 https://github.com/LibVNC/libvncserver/issues/218 https://lists.debian.org/debian-lts-announce/2018/03/msg00035.html https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html https://lists.debian.org/debian-lts-announce/2019/11/msg00032.html https://lists.debian.org/debian-lts-announce/2019/12/msg00028.html RedHat Security Advisories: RHSA-2018:1055 https://access.redhat.com/errata/RHSA-2018:1055 https://usn.ubuntu.com/3618-1/ https://usn.ubuntu.com/4547-1/ https://usn.ubuntu.com/4573-1/ https://usn.ubuntu.com/4587-1/
Copyright	Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.