CVE-2017-18922

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.
Configurations

Configuration 1 (hide)

cpe:2.3:a:libvncserver_project:libvncserver:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:siemens:simatic_itc1500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc1500:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:siemens:simatic_itc1500_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc1500_pro:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:siemens:simatic_itc1900_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc1900:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:siemens:simatic_itc1900_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc1900_pro:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:siemens:simatic_itc2200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc2200:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:siemens:simatic_itc2200_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc2200_pro:-:*:*:*:*:*:*:*

History

01 Apr 2022, 18:08

Type Values Removed Values Added
CPE cpe:2.3:o:siemens:simatic_itc2200_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_itc2200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc1900:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc2200_pro:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc2200:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc1900_pro:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_itc1900_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_itc1500_pro_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc1500_pro:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_itc1500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_itc1900_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_itc1500:-:*:*:*:*:*:*:*
References (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf - (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf - Patch, Third Party Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00066.html - Mailing List, Third Party Advisory

14 Dec 2021, 14:15

Type Values Removed Values Added
References
  • (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf -

Information

Published : 2020-06-30 11:15

Updated : 2024-02-04 21:00


NVD link : CVE-2017-18922

Mitre link : CVE-2017-18922

CVE.ORG link : CVE-2017-18922


JSON object : View

Products Affected

siemens

  • simatic_itc1500
  • simatic_itc1900_firmware
  • simatic_itc2200_pro
  • simatic_itc1900_pro
  • simatic_itc1500_pro_firmware
  • simatic_itc2200_firmware
  • simatic_itc1900_pro_firmware
  • simatic_itc1500_firmware
  • simatic_itc1500_pro
  • simatic_itc2200_pro_firmware
  • simatic_itc2200
  • simatic_itc1900

libvncserver_project

  • libvncserver

canonical

  • ubuntu_linux

opensuse

  • leap

fedoraproject

  • fedora
CWE
CWE-787

Out-of-bounds Write