What is CVE-2018-15361?

CVE-2018-15361 is a critical-severity vulnerability in Ultravnc, classified under Buffer Underwrite. CVSS score: 9.8/10. Published 2019-03-05.

How severe is CVE-2018-15361?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Ultravnc

CVE-2018-15361

UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1…

EPSS: 0.029 (85.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ultravnc — versions 1.2.2.3
Uvnc Ultravnc

Weakness classification (CWE)

References

vulnerability@kaspersky.com (Third Party Advisory, x_refsource_MISC)
vulnerability@kaspersky.com (x_refsource_CONFIRM)
vulnerability@kaspersky.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2018-15361?: CVE-2018-15361 is a critical-severity vulnerability in Ultravnc, classified under Buffer Underwrite. CVSS score: 9.8/10. Published 2019-03-05.
How severe is CVE-2018-15361?: Critical severity. CVSS v3 base score is 9.8 out of 10.