CVE catalog

CVE-2018-20024

libvncserver: CVE-2018-20024

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.17% · Oct 25, 2026

LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianssvncsid1.0.29-7fixed
Debianssvncforky1.0.29-7fixed
Debianssvnctrixie1.0.29-6.1fixed
Debianssvncbookworm1.0.29-6fixed
Debianveyonsid4.9.7+repack1-1.1fixed
Debianveyontrixie4.9.5+repack1-2fixed
Debianveyonbookworm4.7.5+repack1-1fixed
Debianlibvncserversid0.9.15+dfsg-6fixed
Debianlibvncserverforky0.9.15+dfsg-6fixed
Debianlibvncservertrixie0.9.15+dfsg-1+deb13u2fixed
Debianlibvncserverbookworm0.9.14+dfsg-1+deb12u2fixed
Ubuntulibvncserver14.040.9.9+dfsg-1vulnerable
Ubuntulibvncserver14.040.9.9+dfsg-1ubuntu1vulnerable
Ubuntulibvncserver14.040.9.9+dfsg-1ubuntu1.1vulnerable
Ubuntulibvncserver14.040.9.9+dfsg-1ubuntu1.2vulnerable
Ubuntulibvncserver14.040.9.9+dfsg-1ubuntu1.3vulnerable
Ubuntulibvncserver14.040.9.9+dfsg-1ubuntu1.4fixed
Ubuntuitalc16.041:2.0.2+dfsg1-3vulnerable
Ubuntuitalc16.041:2.0.2+dfsg1-4vulnerable
Ubuntuitalc16.041:2.0.2+dfsg1-4ubuntu0.1fixed
Ubuntulibvncserver16.040.9.10+dfsg-3vulnerable
Ubuntulibvncserver16.040.9.10+dfsg-3build1vulnerable
Ubuntulibvncserver16.040.9.10+dfsg-3ubuntu0.16.04.1vulnerable
Ubuntulibvncserver16.040.9.10+dfsg-3ubuntu0.16.04.2vulnerable
Ubuntulibvncserver16.040.9.10+dfsg-3ubuntu0.16.04.3fixed
Ubuntussvnc16.041.0.29-2build1vulnerable
Ubuntussvnc16.041.0.29-2+deb8u1build0.16.04.1fixed
Ubuntuitalc18.041:3.0.3+dfsg1-1vulnerable
Ubuntuitalc18.041:3.0.3+dfsg1-2vulnerable
Ubuntuitalc18.041:3.0.3+dfsg1-2build1vulnerable
Ubuntuitalc18.041:3.0.3+dfsg1-2ubuntu1vulnerable
Ubuntuitalc18.041:3.0.3+dfsg1-3vulnerable
Ubuntuitalc18.041:3.0.3+dfsg1-3ubuntu0.1fixed
Ubuntulibvncserver18.040.9.11+dfsg-1vulnerable
Ubuntulibvncserver18.040.9.11+dfsg-1ubuntu1vulnerable
Ubuntulibvncserver18.040.9.11+dfsg-1ubuntu1.1fixed
Ubuntussvnc18.041.0.29-3vulnerable
Ubuntussvnc18.041.0.29-3build1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianssvncsourcesid1.0.29-5not yet assignedNot reported[945827]
Debianssvncsourceforky1.0.29-5not yet assignedNot reported[945827]
Debianssvncsourcetrixie1.0.29-5not yet assignedNot reported[945827]
Debianssvncsourcebookworm1.0.29-5not yet assignedNot reported[945827]
Debianveyonsourcesid4.1.4+repack1-1not yet assignedNot reportedNot reported
Debianveyonsourcetrixie4.1.4+repack1-1not yet assignedNot reportedNot reported
Debianveyonsourcebookworm4.1.4+repack1-1not yet assignedNot reportedNot reported
Debianlibvncserversourcesid0.9.11+dfsg-1.2not yet assignedNot reported[916941]
Debianlibvncserversourceforky0.9.11+dfsg-1.2not yet assignedNot reported[916941]
Debianlibvncserversourcetrixie0.9.11+dfsg-1.2not yet assignedNot reported[916941]
Debianlibvncserversourcebookworm0.9.11+dfsg-1.2not yet assignedNot reported[916941]
Ubuntulibvncserverdeb14.040.9.9+dfsg-1ubuntu1.4Not reportedUBUNTU-CVE-2018-20024Not reported
Ubuntuitalcdeb16.041:2.0.2+dfsg1-4ubuntu0.1Not reportedUBUNTU-CVE-2018-20024Not reported
Ubuntulibvncserverdeb16.040.9.10+dfsg-3ubuntu0.16.04.3Not reportedUBUNTU-CVE-2018-20024Not reported
Ubuntussvncdeb16.041.0.29-2+deb8u1build0.16.04.1Not reportedUBUNTU-CVE-2018-20024Not reported
Ubuntuitalcdeb18.041:3.0.3+dfsg1-3ubuntu0.1Not reportedUBUNTU-CVE-2018-20024Not reported
Ubuntulibvncserverdeb18.040.9.11+dfsg-1ubuntu1.1Not reportedUBUNTU-CVE-2018-20024Not reported

[Debian bug #945827][Debian bug #916941]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libveyon-core]Fixed

    Source package: [veyon]

    Details (2)

    • 4.7.5+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · bookworm; dsa · veyon · debian · 12

    • 4.7.5+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · bookworm; dsa · veyon · debian · 12

  • [libvncclient1]Fixed

    Source package: [libvncserver]

    Details (2)

    • 0.9.14+dfsg-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · bookworm; dsa · libvncserver · debian · 12

    • 0.9.14+dfsg-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · bookworm; dsa · libvncserver · debian · 12

  • [libvncserver1]Fixed

    Source package: [libvncserver]

    Details (2)

    • 0.9.14+dfsg-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · bookworm; dsa · libvncserver · debian · 12

    • 0.9.14+dfsg-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · bookworm; dsa · libvncserver · debian · 12

  • [libvncserver-dev]Fixed

    Source package: [libvncserver]

    Details (2)

    • 0.9.14+dfsg-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · bookworm; dsa · libvncserver · debian · 12

    • 0.9.14+dfsg-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · bookworm; dsa · libvncserver · debian · 12

  • [ssvnc]Fixed

    Source package: [ssvnc]

    Details (2)

    • 1.0.29-6+b1 · amd64 · bookworm

      Fixed · Fixed: 1.0.29-5

      dsa · ssvnc · debian · bookworm; dsa · ssvnc · debian · 12

    • 1.0.29-6+b1 · arm64 · bookworm

      Fixed · Fixed: 1.0.29-5

      dsa · ssvnc · debian · bookworm; dsa · ssvnc · debian · 12

  • [veyon-configurator]Fixed

    Source package: [veyon]

    Details (2)

    • 4.7.5+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · bookworm; dsa · veyon · debian · 12

    • 4.7.5+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · bookworm; dsa · veyon · debian · 12

  • [veyon-master]Fixed

    Source package: [veyon]

    Details (2)

    • 4.7.5+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · bookworm; dsa · veyon · debian · 12

    • 4.7.5+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · bookworm; dsa · veyon · debian · 12

  • [veyon-plugins]Fixed

    Source package: [veyon]

    Details (2)

    • 4.7.5+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · bookworm; dsa · veyon · debian · 12

    • 4.7.5+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · bookworm; dsa · veyon · debian · 12

  • [veyon-service]Fixed

    Source package: [veyon]

    Details (2)

    • 4.7.5+repack1-1 · amd64 · bookworm

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · bookworm; dsa · veyon · debian · 12

    • 4.7.5+repack1-1 · arm64 · bookworm

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · bookworm; dsa · veyon · debian · 12

[Debian 13 (Trixie)]

  • [libveyon-core]Fixed

    Source package: [veyon]

    Details (2)

    • 4.9.5+repack1-2 · amd64 · trixie

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · 13

    • 4.9.5+repack1-2 · arm64 · trixie

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · 13

  • [libvncclient1]Fixed

    Source package: [libvncserver]

    Details (2)

    • 0.9.15+dfsg-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · 13

    • 0.9.15+dfsg-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · 13

  • [libvncserver1]Fixed

    Source package: [libvncserver]

    Details (2)

    • 0.9.15+dfsg-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · 13

    • 0.9.15+dfsg-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · 13

  • [libvncserver-dev]Fixed

    Source package: [libvncserver]

    Details (2)

    • 0.9.15+dfsg-1+deb13u2 · amd64 · trixie

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · 13

    • 0.9.15+dfsg-1+deb13u2 · arm64 · trixie

      Fixed · Fixed: 0.9.11+dfsg-1.2

      dsa · libvncserver · debian · 13

  • [ssvnc]Fixed
    Details (2)

    • 1.0.29-6.1 · amd64 · trixie

      Fixed · Fixed: 1.0.29-5

      dsa · ssvnc · debian · 13

    • 1.0.29-6.1 · arm64 · trixie

      Fixed · Fixed: 1.0.29-5

      dsa · ssvnc · debian · 13

  • [veyon-configurator]Fixed

    Source package: [veyon]

    Details (2)

    • 4.9.5+repack1-2 · amd64 · trixie

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · 13

    • 4.9.5+repack1-2 · arm64 · trixie

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · 13

  • [veyon-master]Fixed

    Source package: [veyon]

    Details (2)

    • 4.9.5+repack1-2 · amd64 · trixie

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · 13

    • 4.9.5+repack1-2 · arm64 · trixie

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · 13

  • [veyon-plugins]Fixed

    Source package: [veyon]

    Details (2)

    • 4.9.5+repack1-2 · amd64 · trixie

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · 13

    • 4.9.5+repack1-2 · arm64 · trixie

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · 13

  • [veyon-service]Fixed

    Source package: [veyon]

    Details (2)

    • 4.9.5+repack1-2 · amd64 · trixie

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · 13

    • 4.9.5+repack1-2 · arm64 · trixie

      Fixed · Fixed: 4.1.4+repack1-1

      dsa · veyon · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]