Red Hat Security Advisory

RHSA-2013:0169

vino security update

Released 2013-01-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) vino-2.28.1-8.el6_3
Red Hat Enterprise Linux Server (v. 6) vino-2.28.1-8.el6_3
Red Hat Enterprise Linux Workstation (v. 6) vino-2.28.1-8.el6_3

Fixes 5 records

TI-2011-01016 CVE-2011-1165 · GHSA-v9m5-9vg5-h8w2

Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers…

LOW 28

Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attacke…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.02273 Published 2013-03-12 Fixed

TI-2012-03771 CVE-2012-4429 · GHSA-9338-252x-62pc

Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900.

LOW 27

Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02383 Published 2012-10-01 Fixed CWE-200

TI-2011-01015 CVE-2011-1164 · GHSA-w5c8-3xrr-m2x7

Vino before 2.99.4 can connect external networks contrary to the statement in the…

LOW 25

Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier for remote attackers to perform attacks.

CVSS 2.0MEDIUM 4.6 Network Low privileges Interaction — EPSS 0.01627 Published 2013-03-12 Fixed CWE-16

TI-2011-00800 CVE-2011-0904 · GHSA-5c7f-3fp9-p3v4

The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server…

LOW 21

The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remot…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02303 Published 2011-05-10 Partial fix CWE-119

TI-2011-00801 CVE-2011-0905 · GHSA-fx9f-m844-h4j5

The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server…

LOW 20

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01496 Published 2011-05-10 Partial fix CWE-119