CVE:CVE-2018-20748
CNNVD:CNNVD-201901-1016
LibVNC是一款用于实现VNC服务器和客户端功能的跨平台C库。
LibVNC 0.9.12之前版本中的libvncclient/rfbproto.c文件存在堆越界写入漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade libvnc_project libvncserver to a higher version than 0.9.12,and avoid the version (,0.9.12); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade siemens simatic_itc1500_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1500_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1900_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc1900_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc2200_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0); Upgrade siemens simatic_itc2200_pro_firmware to a higher version than 3.2.1.0,and avoid the version [3.0.0.0,3.2.1.0)