Red Hat Security AdvisoryRHSA-2015:0113
libvncserver security update
Released 2015-02-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server EUS (v. 6.5) libvncserver-0.9.7-7.el6_5.1
- Red Hat Enterprise Linux Server Optional EUS (v. 6.5) libvncserver-0.9.7-7.el6_5.1, libvncserver-0.9.7-7.el6_5.1.ppc, libvncserver-devel-0.9.7-7.el6_5.1 +1
Fixes 2 records
Priority MEDIUM 44
Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.08272 · Published 2014-09-30 · Fixed CWE-189
Priority LOW 39
Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary cod…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.0783 · Published 2014-09-30 · Fixed CWE-119
