CVE-2018-15126: Use After Free
Last updated 24 July 2024
Other sources
LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libvncserverto a version that resolves this vulnerability.Fixed in 0.9.13+dfsg-2+deb11u1Fixed in 0.9.14+dfsg-1Fixed in 0.9.15+dfsg-1 - Upgrade
Upgrade
LibVNCto a version that resolves this vulnerability.Patch 73cb96fec028a576a5a24417b57723b55854ad7b
Event History
Frequently Asked Questions
What is CVE-2018-15126?
CVE-2018-15126 is a heap use-after-free vulnerability in the server code of LibVNC's file transfer extension.
How severe is CVE-2018-15126?
CVE-2018-15126 has a severity rating of 9.8 out of 10, which is considered critical.
What software versions are affected by CVE-2018-15126?
CVE-2018-15126 affects LibVNC server versions up to and excluding 0.9.12.
How can I fix CVE-2018-15126?
To fix CVE-2018-15126, update to the patched versions provided by the software vendor.
Where can I find more information about CVE-2018-15126?
More information about CVE-2018-15126 can be found in the references section of this advisory.