CVE-2014-6051: Buffer Overflow
Published Sep 30, 2014
·Updated
Integer overflow in the MallocFrameBuffer function in vncviewer.c in L ...
Affected Software
9 affected componentsFixes available
redhat Enterprise Linux Server Aus=6.5
redhat Enterprise Linux Server Eus=6.5.z
Fedoraproject Fedora=20
Fedoraproject Fedora=21
LibVNCServer LibVNCServer<=0.9.9
Debian Debian Linux=7.0
Oracle Solaris=11.3
debian/libvncserver
0.9.13+dfsg-2+deb11u10.9.14+dfsg-10.9.15+dfsg-1
debian/veyon
4.5.3+repack1-14.7.5+repack1-14.9.5+repack1-2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libvncserverto a version that resolves this vulnerability.Fixed in 0.9.13+dfsg-2+deb11u1Fixed in 0.9.14+dfsg-1Fixed in 0.9.15+dfsg-1 - Upgrade
Upgrade
debian/veyonto a version that resolves this vulnerability.Fixed in 4.5.3+repack1-1Fixed in 4.7.5+repack1-1Fixed in 4.9.5+repack1-2
Event History
Sep 30, 2014
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is CVE-2014-6051?
CVE-2014-6051 is an integer overflow vulnerability in LibVNCServer 0.9.9 and earlier versions.
2
How does CVE-2014-6051 affect the software?
CVE-2014-6051 allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code.
3
Which software versions are affected by CVE-2014-6051?
LibVNCServer versions 0.9.9 and earlier are affected by CVE-2014-6051.
4
What is the severity of CVE-2014-6051?
CVE-2014-6051 has a severity rating of 7.5 out of 10.
5
How can I fix CVE-2014-6051?
Update to LibVNCServer version 1.0.0 or later.