CVE:CVE-2018-7225
CNNVD:CNNVD-201802-818
LibVNCServer是一个VNC服务器C类库，它可开发VNC服务器或VNC客户端。
LibVNCServer 0.9.11及之前的版本中存在安全漏洞，该漏洞源于rfbserver.c文件的‘rfbProcessClientNormalMessage()’函数没有过滤msg.cct.length。攻击者可借助特制的VNC数据包利用该漏洞访问未初始化的敏感数据。
solution:Upgrade libvncserver_project libvncserver to a higher version than 0.9.11,and avoid the version (,0.9.11]; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,and avoid the version 14.04,16.04,17.10; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.5,7.6,and avoid the version 7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0