peter bassill · operator
$ cve CVE-2018-20019 JSON

CVE-2018-20019

9.8
CRITICAL · CVSS 3.1 · EPSS 9.5% (pctl 95)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS9.47% — more likely to be exploited than 95% of all CVEs
WeaknessCWE-787
On CISA KEVno
Public exploitnone known
Published2018-12-19
Last modified2026-06-17

Affected (15)

VendorProduct
canonicalubuntu linux
debiandebian linux
libvnc projectlibvncserver
siemenssimatic itc1500
siemenssimatic itc1500 firmware
siemenssimatic itc1500 pro
siemenssimatic itc1500 pro firmware
siemenssimatic itc1900
siemenssimatic itc1900 firmware
siemenssimatic itc1900 pro
siemenssimatic itc1900 pro firmware
siemenssimatic itc2200
siemenssimatic itc2200 firmware
siemenssimatic itc2200 pro
siemenssimatic itc2200 pro firmware

References

→ the Explorer  ·  watch your stack  ·  NVD