Design/Logic Flaw

🗓️ 15 Dec 2014 18:59:00Reported by PRIOn knowledge baseType

The rfbProcessClientNormalMessage function in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service via crafted message

Reporter	Title	Published	Views	Family All 148
ArchLinux	libvncserver: remote code execution, denial of service	24 Oct 201400:00	–	archlinux
AstraLinux	Astra Linux - уязвимость в vino	20 May 202605:53	–	astralinux
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

Source	Link
ubuntu	www.ubuntu.com/usn/usn-2365-1
openwall	www.openwall.com/lists/oss-security/2014/09/25/11
github	www.github.com/newsoft/libvncserver/commit/6037a9074d52b1963c97cb28ea1096c7c14cbf28
ocert	www.ocert.org/advisories/ocert-2014-007.html
seclists	www.seclists.org/oss-sec/2014/q3/639
secunia	www.secunia.com/advisories/61506
secunia	www.secunia.com/advisories/61682
debian	www.debian.org/security/2014/dsa-3081
lists	www.lists.opensuse.org/opensuse-updates/2015-12/msg00022.html
security	www.security.gentoo.org/glsa/201507-07

23 Oct 2020 13:15Current

6.9Medium risk

Vulners AI Score6.9

EPSS0.36865