CVE:CVE-2018-15126
CNNVD:CNNVD-201812-839
LibVNC是一款用于实现VNC服务器和客户端功能的跨平台C库。
LibVNC commit 73cb96fec028a576a5a24417b57723b55854ad7b之前版本中文件传输扩展的服务器代码存在释放后重用漏洞。远程攻击者可利用该漏洞执行任意代码。
solution:Upgrade libvnc_project libvncserver to a higher version than 0.9.12,and avoid the version (,0.9.12); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0