CVE-2014-6052: Input Validation
Last updated 24 July 2024
Other sources
The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibV ...
— Debian
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libvncserverto a version that resolves this vulnerability.Fixed in 0.9.13+dfsg-2+deb11u1Fixed in 0.9.14+dfsg-1Fixed in 0.9.15+dfsg-1 - Upgrade
Upgrade
debian/veyonto a version that resolves this vulnerability.Fixed in 4.5.3+repack1-1Fixed in 4.7.5+repack1-1Fixed in 4.9.5+repack1-2
Event History
Frequently Asked Questions
What is CVE-2014-6052?
CVE-2014-6052 is a vulnerability in LibVNCServer that allows remote VNC servers to cause a denial of service or possibly execute arbitrary code.
How does CVE-2014-6052 affect LibVNCServer?
CVE-2014-6052 affects LibVNCServer versions 0.9.9 and earlier by not checking certain malloc return values.
What is the severity of CVE-2014-6052?
CVE-2014-6052 has a severity score of 7.5, which is considered high.
How can CVE-2014-6052 be fixed?
To fix CVE-2014-6052, update LibVNCServer to version 0.9.10 or later.
Where can I find more information about CVE-2014-6052?
More information about CVE-2014-6052 can be found at the following references: [1] [2] [3].