{"affected":[{"ecosystem_specific":{"binaries":[{"LibVNCServer-devel":"0.9.10-lp152.9.4.1","libvncclient0":"0.9.10-lp152.9.4.1","libvncserver0":"0.9.10-lp152.9.4.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.2","name":"LibVNCServer","purl":"purl:rpm/suse/LibVNCServer&distro=openSUSE%20Leap%2015.2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.9.10-lp152.9.4.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for LibVNCServer fixes the following issues:\n\n- CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer \n  which subsequently used leading to potential remote code execution (bsc#1173477).\t  \n\nThis update was imported from the SUSE:SLE-15:Update update project.","id":"openSUSE-SU-2020:0978-1","modified":"2020-07-17T16:29:39Z","published":"2020-07-17T16:29:39Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BHW55DN53AINCCLG5CRY5VTFMFBMAJWZ/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1173477"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-18922"}],"related":["CVE-2017-18922"],"summary":"Security update for LibVNCServer"}