Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2018-20019
LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution
Exploit prediction scoring system (EPSS) score
EPSS Score
0.173
EPSS Ranking
94.6%
CVSS Severity
CVSS v3 Score
9.8
CVSS v2 Score
7.5
References
https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-029-libvnc-multiple-heap-out-of-bound-vulnerabilities/
https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html
https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
https://security.gentoo.org/glsa/201908-05
https://usn.ubuntu.com/3877-1/
https://usn.ubuntu.com/4547-1/
https://usn.ubuntu.com/4587-1/
https://www.debian.org/security/2019/dsa-4383
https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-029-libvnc-multiple-heap-out-of-bound-vulnerabilities/
https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html
https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
https://security.gentoo.org/glsa/201908-05
https://usn.ubuntu.com/3877-1/
https://usn.ubuntu.com/4547-1/
https://usn.ubuntu.com/4587-1/
https://www.debian.org/security/2019/dsa-4383
Products affected by CVE-2018-20019
Libvnc Project
»
Libvncserver
»
Version:
Any
cpe:2.3:a:libvnc_project:libvncserver:*
Siemens
»
Simatic Itc1500
»
Version:
N/A
cpe:2.3:h:siemens:simatic_itc1500:-
Siemens
»
Simatic Itc1500 Pro
»
Version:
N/A
cpe:2.3:h:siemens:simatic_itc1500_pro:-
Siemens
»
Simatic Itc1900
»
Version:
N/A
cpe:2.3:h:siemens:simatic_itc1900:-
Siemens
»
Simatic Itc1900 Pro
»
Version:
N/A
cpe:2.3:h:siemens:simatic_itc1900_pro:-
Siemens
»
Simatic Itc2200
»
Version:
N/A
cpe:2.3:h:siemens:simatic_itc2200:-
Siemens
»
Simatic Itc2200 Pro
»
Version:
N/A
cpe:2.3:h:siemens:simatic_itc2200_pro:-
Canonical
»
Ubuntu Linux
»
Version:
14.04
cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical
»
Ubuntu Linux
»
Version:
16.04
cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical
»
Ubuntu Linux
»
Version:
18.04
cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical
»
Ubuntu Linux
»
Version:
18.10
cpe:2.3:o:canonical:ubuntu_linux:18.10
Debian
»
Debian Linux
»
Version:
8.0
cpe:2.3:o:debian:debian_linux:8.0
Debian
»
Debian Linux
»
Version:
9.0
cpe:2.3:o:debian:debian_linux:9.0
Siemens
»
Simatic Itc1500 Firmware
»
Version:
3.0.0.0
cpe:2.3:o:siemens:simatic_itc1500_firmware:3.0.0.0
Siemens
»
Simatic Itc1500 Pro Firmware
»
Version:
3.0.0.0
cpe:2.3:o:siemens:simatic_itc1500_pro_firmware:3.0.0.0
Siemens
»
Simatic Itc1900 Firmware
»
Version:
3.0.0.0
cpe:2.3:o:siemens:simatic_itc1900_firmware:3.0.0.0
Siemens
»
Simatic Itc1900 Pro Firmware
»
Version:
3.0.0.0
cpe:2.3:o:siemens:simatic_itc1900_pro_firmware:3.0.0.0
Siemens
»
Simatic Itc2200 Firmware
»
Version:
3.0.0.0
cpe:2.3:o:siemens:simatic_itc2200_firmware:3.0.0.0
Siemens
»
Simatic Itc2200 Pro Firmware
»
Version:
3.0.0.0
cpe:2.3:o:siemens:simatic_itc2200_pro_firmware:3.0.0.0
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved