CVE-2014-6053 The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows re...
MediumCVSS 5.0
EPSS 7.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libvncserver(Debian:12) | < 0.9.9+dfsg-6.1 | 0.9.9+dfsg-6.1 |
| debian/libvncserver(Debian:13) | < 0.9.9+dfsg-6.1 | 0.9.9+dfsg-6.1 |
| debian/libvncserver(Debian:14) | < 0.9.9+dfsg-6.1 | 0.9.9+dfsg-6.1 |
| debian/tightvnc(Debian:12) | < 1:1.3.9-9.1 | 1:1.3.9-9.1 |
| debian/tightvnc(Debian:13) | < 1:1.3.9-9.1 | 1:1.3.9-9.1 |
| debian/tightvnc(Debian:14) | < 1:1.3.9-9.1 | 1:1.3.9-9.1 |
| debian/vino(Debian:12) | < 3.22.0-6 | 3.22.0-6 |
| libvncserver | <= 0.9.9 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| ubuntu/tightvnc(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/tightvnc(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/tightvnc(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/tightvnc(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-2365-1 vendor-advisory
- USN-4573-1 vendor-advisory
- USN-4587-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2014-6053 vendor-advisory
- openSUSE-SU-2015:2207 vendor-advisory
- [oss-security] 20140923 Multiple issues in libVNCserver mailing-list third-party-advisory
- 61506 third-party-advisory
- 61682 third-party-advisory
- USN-2365-1 third-party-advisory vendor-advisory
- DSA-3081 third-party-advisory vendor-advisory
- www.ocert.org third-party-advisory us-government-resource
- [oss-security] 20140925 [oCERT-2014-007] libvncserver multiple issues mailing-list third-party-advisory
- github.com issue-tracking patch
- [debian-lts-announce] 20191030 [SECURITY] [DLA 1979-1] italc security update mailing-list
- [debian-lts-announce] 20191129 [SECURITY] [DLA 2014-1] vino security update mailing-list
- [debian-lts-announce] 20191221 [SECURITY] [DLA 2045-1] tightvnc security update mailing-list
- GLSA-201507-07 vendor-advisory
- USN-4573-1 vendor-advisory
- USN-4587-1 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking