libvncserver: server NULL pointer dereference flaw in ClientCutText message handling

🗓️ 11 Nov 2014 18:25:37Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 2 Views

LibVNCServer has a NULL pointer dereference in ClientCutText handling, crashing the VNC server.

Reporter	Title	Published	Views	Family All 148
ArchLinux	libvncserver: remote code execution, denial of service	24 Oct 201400:00	–	archlinux
AstraLinux	Astra Linux – Vulnerability in Vino	20 May 202605:53	–	astralinux
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	6.6	i686	libvncserver	0.9.7-7.el6_6.1	libvncserver-0.9.7-7.el6_6.1.i686.rpm
Red Hat Enterprise Linux	6.6	ppc	libvncserver	0.9.7-7.el6_6.1	libvncserver-0.9.7-7.el6_6.1.ppc.rpm
Red Hat Enterprise Linux	6.6	ppc64	libvncserver	0.9.7-7.el6_6.1	libvncserver-0.9.7-7.el6_6.1.ppc64.rpm
Red Hat Enterprise Linux	6.6	s390	libvncserver	0.9.7-7.el6_6.1	libvncserver-0.9.7-7.el6_6.1.s390.rpm
Red Hat Enterprise Linux	6.6	s390x	libvncserver	0.9.7-7.el6_6.1	libvncserver-0.9.7-7.el6_6.1.s390x.rpm
Red Hat Enterprise Linux	6.6	x86_64	libvncserver	0.9.7-7.el6_6.1	libvncserver-0.9.7-7.el6_6.1.x86_64.rpm
Red Hat Enterprise Linux	7.0	i686	libvncserver	0.9.9-9.el7_0.1	libvncserver-0.9.9-9.el7_0.1.i686.rpm
Red Hat Enterprise Linux	7.0	x86_64	libvncserver	0.9.9-9.el7_0.1	libvncserver-0.9.9-9.el7_0.1.x86_64.rpm
Red Hat Enterprise Linux	6.6	i686	libvncserver-debuginfo	0.9.7-7.el6_6.1	libvncserver-debuginfo-0.9.7-7.el6_6.1.i686.rpm
Red Hat Enterprise Linux	6.6	ppc	libvncserver-debuginfo	0.9.7-7.el6_6.1	libvncserver-debuginfo-0.9.7-7.el6_6.1.ppc.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2014-6053
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-6053
cve	www.cve.org/CVERecord

27 Jun 2026 10:25Current

7.3High risk

Vulners AI Score7.3

CVSS 25

EPSS0.07563

LibVNCServer null pointer client cut text dereference remote crash server crash