libvncserver1 0.9.11+dfsg-1ubuntu1.1: libvncserver1 0.9.11+dfsg-1ubuntu1.1 for Ubuntu 18.04.6 LTS (bionic)

libvncserver1 0.9.11+dfsg-1ubuntu1.1, released January 29, 2019, fixes 12 CVEs in libvncserver1. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

n/a

No CVSS score published

Highest EPSS

0.2654

98th percentile

Priority of the 12 CVEs

Patch now 0
                                Urgent 0
                                High 0
                                Routine 12

Fixed package versions

Product	Release	Fixed in
libvncserver1	Ubuntu 18.04.6 LTS (bionic)	0.9.11+dfsg-1ubuntu1.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Routine	CVE-2018-6307	libvncclient1: LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server co...	n/a	0.2654	None reported
Routine	CVE-2018-15127	italc-client: LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in serve...	n/a	0.1509	None reported
Routine	CVE-2018-15126	libvncclient1: LibVNC before commit 73cb96fec028a576a5a24417b57723b55854ad7b contains heap use-after-free vulnerability in server co...	n/a	0.1181	None reported
Routine	CVE-2018-20019	libitalccore: LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabiliti...	n/a	0.0965	None reported
Routine	CVE-2018-20020	italc-client: LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside s...	n/a	0.0879	None reported
Routine	CVE-2018-20021	italc-client: LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC...	n/a	0.0342	None reported
Routine	CVE-2018-20750	libvncserver-config: LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c	n/a	0.0334	None reported
Routine	CVE-2018-20748	italc-client: LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c	n/a	0.0332	None reported
Routine	CVE-2018-20749	italc-client: LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c	n/a	0.0323	None reported
Routine	CVE-2018-20024	italc-management-console: LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code th...	n/a	0.0317	None reported
Routine	CVE-2018-20022	italc-client: LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization...	n/a	0.0294	None reported
Routine	CVE-2018-20023	italc-client: LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC...	n/a	0.0250	None reported

Also fixes CVE-2018-6307

libvncclient1 0.9.11+dfsg-1ubuntu1.1
libvncclient1 on Ubuntu 18.04.6 LTS (bionic)
libvncserver-config 0.9.11+dfsg-1ubuntu1.1
libvncserver-config on Ubuntu 18.04.6 LTS (bionic)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-bionic-libvncserver1-0.9.11-dfsg-1ubuntu1.1">libvncserver1 0.9.11+dfsg-1ubuntu1.1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.