USN-3618-1: LibVNCServer vulnerability
It was discovered that LibVNCServer incorrectly handled certain packet lengths. A remote attacker able to connect to a LibVNCServer could possibly use this issue to obtain sensitive information, cause a denial of service, or execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libvncclient1to a version that resolves this vulnerability.Fixed in 0.9.11+dfsg-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libvncserver1to a version that resolves this vulnerability.Fixed in 0.9.11+dfsg-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libvncserver1to a version that resolves this vulnerability.Fixed in 0.9.10+dfsg-3ubuntu0.16.04.2 - Upgrade
Upgrade
ubuntu/libvncserver0to a version that resolves this vulnerability.Fixed in 0.9.9+dfsg-1ubuntu1.3
Event History
Frequently Asked Questions
What is the vulnerability in LibVNCServer?
A remote attacker can exploit the vulnerability to obtain sensitive information, cause a denial of service, or execute arbitrary code.
Which versions of LibVNCServer are affected by this vulnerability?
The vulnerability affects LibVNCServer versions 0.9.11+dfsg-1ubuntu0.1, 0.9.10+dfsg-3ubuntu0.16.04.2, and 0.9.9+dfsg-1ubuntu1.3.
How can I fix the LibVNCServer vulnerability?
To fix the vulnerability, update LibVNCServer to version 0.9.11+dfsg-1ubuntu0.1 if you are using Ubuntu 17.10, version 0.9.10+dfsg-3ubuntu0.16.04.2 if you are using Ubuntu 16.04, or version 0.9.9+dfsg-1ubuntu1.3 if you are using Ubuntu 14.04.
Where can I find more information about the vulnerability in LibVNCServer?
You can find more information about the vulnerability in LibVNCServer on the Ubuntu security website: [CVE-2018-7225](https://ubuntu.com/security/CVE-2018-7225), [USN-4547-1](https://ubuntu.com/security/notices/USN-4547-1), [USN-4573-1](https://ubuntu.com/security/notices/USN-4573-1).
How can a remote attacker exploit the LibVNCServer vulnerability?
A remote attacker can exploit the vulnerability by connecting to a vulnerable LibVNCServer and sending specially crafted packets with incorrect lengths.