Read the docs
TI-2011-00800 Aliases CVE-2011-0904GHSA-5c7f-3fp9-p3v4

The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server…

Priority LOW 21CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
Partial Red Hat: 3 fixed, 2 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.

Summary

The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.

Why it matters now

EPSS 0.02303 83rd percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 3 fixed, 2 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 71

CPEVersionsRoleVendor
cpe:2.3:a:david_king:vino:2.7:*:*:*:*:*:*:*2.7VulnerableDavid King
cpe:2.3:a:david_king:vino:2.7.3:*:*:*:*:*:*:*2.7.3VulnerableDavid King
cpe:2.3:a:david_king:vino:2.7.3.1:*:*:*:*:*:*:*2.7.3.1VulnerableDavid King
cpe:2.3:a:david_king:vino:2.7.4:*:*:*:*:*:*:*2.7.4VulnerableDavid King
cpe:2.3:a:david_king:vino:2.7.4.90:*:*:*:*:*:*:*2.7.4.90VulnerableDavid King
cpe:2.3:a:david_king:vino:2.7.4.91:*:*:*:*:*:*:*2.7.4.91VulnerableDavid King
cpe:2.3:a:david_king:vino:2.7.92:*:*:*:*:*:*:*2.7.92VulnerableDavid King
cpe:2.3:a:david_king:vino:2.8:*:*:*:*:*:*:*2.8VulnerableDavid King
cpe:2.3:a:david_king:vino:2.9:*:*:*:*:*:*:*2.9VulnerableDavid King
cpe:2.3:a:david_king:vino:2.9.2:*:*:*:*:*:*:*2.9.2VulnerableDavid King
  • cpe:2.3:a:david_king:vino:2.7:*:*:*:*:*:*:* Versions 2.7 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.7.3:*:*:*:*:*:*:* Versions 2.7.3 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.7.3.1:*:*:*:*:*:*:* Versions 2.7.3.1 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.7.4:*:*:*:*:*:*:* Versions 2.7.4 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.7.4.90:*:*:*:*:*:*:* Versions 2.7.4.90 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.7.4.91:*:*:*:*:*:*:* Versions 2.7.4.91 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.7.92:*:*:*:*:*:*:* Versions 2.7.92 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.8:*:*:*:*:*:*:* Versions 2.8 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.9:*:*:*:*:*:*:* Versions 2.9 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.9.2:*:*:*:*:*:*:* Versions 2.9.2 Vulnerable ·David King
Show 61 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:david_king:vino:2.10:*:*:*:*:*:*:*2.10VulnerableDavid King
cpe:2.3:a:david_king:vino:2.11:*:*:*:*:*:*:*2.11VulnerableDavid King
cpe:2.3:a:david_king:vino:2.12:*:*:*:*:*:*:*2.12VulnerableDavid King
cpe:2.3:a:david_king:vino:2.13:*:*:*:*:*:*:*2.13VulnerableDavid King
cpe:2.3:a:david_king:vino:2.13.5:*:*:*:*:*:*:*2.13.5VulnerableDavid King
cpe:2.3:a:david_king:vino:2.14:*:*:*:*:*:*:*2.14VulnerableDavid King
cpe:2.3:a:david_king:vino:2.15:*:*:*:*:*:*:*2.15VulnerableDavid King
cpe:2.3:a:david_king:vino:2.16:*:*:*:*:*:*:*2.16VulnerableDavid King
cpe:2.3:a:david_king:vino:2.17:*:*:*:*:*:*:*2.17VulnerableDavid King
cpe:2.3:a:david_king:vino:2.17.2:*:*:*:*:*:*:*2.17.2VulnerableDavid King
cpe:2.3:a:david_king:vino:2.17.4:*:*:*:*:*:*:*2.17.4VulnerableDavid King
cpe:2.3:a:david_king:vino:2.17.5:*:*:*:*:*:*:*2.17.5VulnerableDavid King
cpe:2.3:a:david_king:vino:2.17.92:*:*:*:*:*:*:*2.17.92VulnerableDavid King
cpe:2.3:a:david_king:vino:2.18:*:*:*:*:*:*:*2.18VulnerableDavid King
cpe:2.3:a:david_king:vino:2.18.1:*:*:*:*:*:*:*2.18.1VulnerableDavid King
cpe:2.3:a:david_king:vino:2.19:*:*:*:*:*:*:*2.19VulnerableDavid King
cpe:2.3:a:david_king:vino:2.19.5:*:*:*:*:*:*:*2.19.5VulnerableDavid King
cpe:2.3:a:david_king:vino:2.19.90:*:*:*:*:*:*:*2.19.90VulnerableDavid King
cpe:2.3:a:david_king:vino:2.19.92:*:*:*:*:*:*:*2.19.92VulnerableDavid King
cpe:2.3:a:david_king:vino:2.20:*:*:*:*:*:*:*2.20VulnerableDavid King
cpe:2.3:a:david_king:vino:2.20.1:*:*:*:*:*:*:*2.20.1VulnerableDavid King
cpe:2.3:a:david_king:vino:2.21:*:*:*:*:*:*:*2.21VulnerableDavid King
cpe:2.3:a:david_king:vino:2.21.1:*:*:*:*:*:*:*2.21.1VulnerableDavid King
cpe:2.3:a:david_king:vino:2.21.2:*:*:*:*:*:*:*2.21.2VulnerableDavid King
cpe:2.3:a:david_king:vino:2.21.3:*:*:*:*:*:*:*2.21.3VulnerableDavid King
cpe:2.3:a:david_king:vino:2.21.90:*:*:*:*:*:*:*2.21.90VulnerableDavid King
cpe:2.3:a:david_king:vino:2.21.91:*:*:*:*:*:*:*2.21.91VulnerableDavid King
cpe:2.3:a:david_king:vino:2.21.92:*:*:*:*:*:*:*2.21.92VulnerableDavid King
cpe:2.3:a:david_king:vino:2.22:*:*:*:*:*:*:*2.22VulnerableDavid King
cpe:2.3:a:david_king:vino:2.22.1:*:*:*:*:*:*:*2.22.1VulnerableDavid King
cpe:2.3:a:david_king:vino:2.22.2:*:*:*:*:*:*:*2.22.2VulnerableDavid King
cpe:2.3:a:david_king:vino:2.23:*:*:*:*:*:*:*2.23VulnerableDavid King
cpe:2.3:a:david_king:vino:2.23.5:*:*:*:*:*:*:*2.23.5VulnerableDavid King
cpe:2.3:a:david_king:vino:2.23.90:*:*:*:*:*:*:*2.23.90VulnerableDavid King
cpe:2.3:a:david_king:vino:2.23.91:*:*:*:*:*:*:*2.23.91VulnerableDavid King
cpe:2.3:a:david_king:vino:2.23.92:*:*:*:*:*:*:*2.23.92VulnerableDavid King
cpe:2.3:a:david_king:vino:2.24:*:*:*:*:*:*:*2.24VulnerableDavid King
cpe:2.3:a:david_king:vino:2.24.1:*:*:*:*:*:*:*2.24.1VulnerableDavid King
cpe:2.3:a:david_king:vino:2.25:*:*:*:*:*:*:*2.25VulnerableDavid King
cpe:2.3:a:david_king:vino:2.25.3:*:*:*:*:*:*:*2.25.3VulnerableDavid King
cpe:2.3:a:david_king:vino:2.25.4:*:*:*:*:*:*:*2.25.4VulnerableDavid King
cpe:2.3:a:david_king:vino:2.25.5:*:*:*:*:*:*:*2.25.5VulnerableDavid King
cpe:2.3:a:david_king:vino:2.25.90:*:*:*:*:*:*:*2.25.90VulnerableDavid King
cpe:2.3:a:david_king:vino:2.25.91:*:*:*:*:*:*:*2.25.91VulnerableDavid King
cpe:2.3:a:david_king:vino:2.25.92:*:*:*:*:*:*:*2.25.92VulnerableDavid King
cpe:2.3:a:david_king:vino:2.26:*:*:*:*:*:*:*2.26VulnerableDavid King
cpe:2.3:a:david_king:vino:2.26.1:*:*:*:*:*:*:*2.26.1VulnerableDavid King
cpe:2.3:a:david_king:vino:2.26.2:*:*:*:*:*:*:*2.26.2VulnerableDavid King
cpe:2.3:a:david_king:vino:2.27:*:*:*:*:*:*:*2.27VulnerableDavid King
cpe:2.3:a:david_king:vino:2.27.5:*:*:*:*:*:*:*2.27.5VulnerableDavid King
cpe:2.3:a:david_king:vino:2.27.90:*:*:*:*:*:*:*2.27.90VulnerableDavid King
cpe:2.3:a:david_king:vino:2.27.91:*:*:*:*:*:*:*2.27.91VulnerableDavid King
cpe:2.3:a:david_king:vino:2.27.92:*:*:*:*:*:*:*2.27.92VulnerableDavid King
cpe:2.3:a:david_king:vino:2.28:*:*:*:*:*:*:*2.28VulnerableDavid King
cpe:2.3:a:david_king:vino:2.28.1:*:*:*:*:*:*:*2.28.1VulnerableDavid King
cpe:2.3:a:david_king:vino:2.28.2:*:*:*:*:*:*:*2.28.2VulnerableDavid King
cpe:2.3:a:david_king:vino:2.32.0:*:*:*:*:*:*:*2.32.0VulnerableDavid King
cpe:2.3:a:david_king:vino:2.32.1:*:*:*:*:*:*:*2.32.1VulnerableDavid King
cpe:2.3:a:david_king:vino:3.0.0:*:*:*:*:*:*:*3.0.0VulnerableDavid King
cpe:2.3:a:david_king:vino:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableDavid King
cpe:2.3:a:david_king:vino:3.1:*:*:*:*:*:*:*3.1VulnerableDavid King
  • cpe:2.3:a:david_king:vino:2.10:*:*:*:*:*:*:* Versions 2.10 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.11:*:*:*:*:*:*:* Versions 2.11 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.12:*:*:*:*:*:*:* Versions 2.12 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.13:*:*:*:*:*:*:* Versions 2.13 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.13.5:*:*:*:*:*:*:* Versions 2.13.5 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.14:*:*:*:*:*:*:* Versions 2.14 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.15:*:*:*:*:*:*:* Versions 2.15 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.16:*:*:*:*:*:*:* Versions 2.16 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.17:*:*:*:*:*:*:* Versions 2.17 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.17.2:*:*:*:*:*:*:* Versions 2.17.2 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.17.4:*:*:*:*:*:*:* Versions 2.17.4 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.17.5:*:*:*:*:*:*:* Versions 2.17.5 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.17.92:*:*:*:*:*:*:* Versions 2.17.92 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.18:*:*:*:*:*:*:* Versions 2.18 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.18.1:*:*:*:*:*:*:* Versions 2.18.1 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.19:*:*:*:*:*:*:* Versions 2.19 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.19.5:*:*:*:*:*:*:* Versions 2.19.5 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.19.90:*:*:*:*:*:*:* Versions 2.19.90 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.19.92:*:*:*:*:*:*:* Versions 2.19.92 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.20:*:*:*:*:*:*:* Versions 2.20 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.20.1:*:*:*:*:*:*:* Versions 2.20.1 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.21:*:*:*:*:*:*:* Versions 2.21 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.21.1:*:*:*:*:*:*:* Versions 2.21.1 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.21.2:*:*:*:*:*:*:* Versions 2.21.2 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.21.3:*:*:*:*:*:*:* Versions 2.21.3 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.21.90:*:*:*:*:*:*:* Versions 2.21.90 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.21.91:*:*:*:*:*:*:* Versions 2.21.91 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.21.92:*:*:*:*:*:*:* Versions 2.21.92 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.22:*:*:*:*:*:*:* Versions 2.22 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.22.1:*:*:*:*:*:*:* Versions 2.22.1 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.22.2:*:*:*:*:*:*:* Versions 2.22.2 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.23:*:*:*:*:*:*:* Versions 2.23 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.23.5:*:*:*:*:*:*:* Versions 2.23.5 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.23.90:*:*:*:*:*:*:* Versions 2.23.90 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.23.91:*:*:*:*:*:*:* Versions 2.23.91 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.23.92:*:*:*:*:*:*:* Versions 2.23.92 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.24:*:*:*:*:*:*:* Versions 2.24 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.24.1:*:*:*:*:*:*:* Versions 2.24.1 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.25:*:*:*:*:*:*:* Versions 2.25 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.25.3:*:*:*:*:*:*:* Versions 2.25.3 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.25.4:*:*:*:*:*:*:* Versions 2.25.4 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.25.5:*:*:*:*:*:*:* Versions 2.25.5 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.25.90:*:*:*:*:*:*:* Versions 2.25.90 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.25.91:*:*:*:*:*:*:* Versions 2.25.91 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.25.92:*:*:*:*:*:*:* Versions 2.25.92 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.26:*:*:*:*:*:*:* Versions 2.26 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.26.1:*:*:*:*:*:*:* Versions 2.26.1 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.26.2:*:*:*:*:*:*:* Versions 2.26.2 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.27:*:*:*:*:*:*:* Versions 2.27 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.27.5:*:*:*:*:*:*:* Versions 2.27.5 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.27.90:*:*:*:*:*:*:* Versions 2.27.90 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.27.91:*:*:*:*:*:*:* Versions 2.27.91 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.27.92:*:*:*:*:*:*:* Versions 2.27.92 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.28:*:*:*:*:*:*:* Versions 2.28 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.28.1:*:*:*:*:*:*:* Versions 2.28.1 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.28.2:*:*:*:*:*:*:* Versions 2.28.2 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.32.0:*:*:*:*:*:*:* Versions 2.32.0 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:2.32.1:*:*:*:*:*:*:* Versions 2.32.1 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·David King
  • cpe:2.3:a:david_king:vino:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·David King

Remediation

Red Hat 1 advisory

  • RHSA-2013:0169 Released 2013-01-21 · Red Hat rating Moderate
    vino security update
    • Red Hat Enterprise Linux Desktop (v. 6) vino-2.28.1-8.el6_3
    • Red Hat Enterprise Linux Server (v. 6) vino-2.28.1-8.el6_3
    • Red Hat Enterprise Linux Workstation (v. 6) vino-2.28.1-8.el6_3

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 4AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2013:0169
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2013:0169
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2013:0169
Not affected: 1 product
  • Red Hat Enterprise Linux 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-0904
  2. 2026-10-03 Alias added: GHSA-5c7f-3fp9-p3v4

References

Patch 9

Advisory 6

Other 4

  • TI-2013-04886 The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1… CVSS 2.0HIGH 7.1
  • TI-2011-01016 Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers… CVSS 2.0MEDIUM 5.1
  • TI-2012-03771 Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900. CVSS 2.0MEDIUM 5.0
  • TI-2011-01015 Vino before 2.99.4 can connect external networks contrary to the statement in the… CVSS 2.0MEDIUM 4.6
  • TI-2011-00801 The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server… CVSS 2.0LOW 3.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences