CVE-2014-6051: Buffer Overflow
Published Sep 30, 2014
·Updated
Integer overflow in the MallocFrameBuffer function in vncviewer.c in L ...
Affected Software
9 affected componentsFixes available
redhat Enterprise Linux Server Aus=6.5
redhat Enterprise Linux Server Eus=6.5.z
Fedoraproject Fedora=20
Fedoraproject Fedora=21
LibVNCServer LibVNCServer<=0.9.9
Debian Debian Linux=7.0
Oracle Solaris=11.3
debian/libvncserver
0.9.13+dfsg-2+deb11u10.9.14+dfsg-10.9.15+dfsg-1
debian/veyon
4.5.3+repack1-14.7.5+repack1-14.9.5+repack1-2
Remediation
Patch Available
Event History
Sep 30, 2014
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:05 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:04 AM
RemedyDescriptionSeverityAffected Software
Apr 24, 2025
Data Sourced
via Debian·02:09 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2014-6051?
CVE-2014-6051 is an integer overflow vulnerability in LibVNCServer 0.9.9 and earlier versions.
2
How does CVE-2014-6051 affect the software?
CVE-2014-6051 allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code.
3
Which software versions are affected by CVE-2014-6051?
LibVNCServer versions 0.9.9 and earlier are affected by CVE-2014-6051.
4
What is the severity of CVE-2014-6051?
CVE-2014-6051 has a severity rating of 7.5 out of 10.
5
How can I fix CVE-2014-6051?
Update to LibVNCServer version 1.0.0 or later.