CVE-2014-6054: Medium severity red hat libvncserver vulnerability
Last updated 24 July 2024
Other sources
The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service (divide-by-zero error and server crash) via a zero value in the scaling factor in a (1) PalmVNCSetScaleFactor or (2) SetScale message.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2014-6054?
CVE-2014-6054 is a vulnerability in the LibVNCServer library that allows remote attackers to cause a denial of service (divide-by-zero error and server crash) by sending a zero value in the scaling factor in certain messages.
How severe is CVE-2014-6054?
CVE-2014-6054 has a severity rating of 4.3 out of 10, which is considered medium.
Which software versions are affected by CVE-2014-6054?
LibVNCServer versions 0.9.9 and earlier are affected by CVE-2014-6054.
How can I fix CVE-2014-6054?
To fix CVE-2014-6054, it is recommended to upgrade to a patched version of LibVNCServer.
Where can I find more information about CVE-2014-6054?
More information about CVE-2014-6054 can be found at the following references: [http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html](http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html), [http://seclists.org/oss-sec/2014/q3/639](http://seclists.org/oss-sec/2014/q3/639), [http://secunia.com/advisories/61506](http://secunia.com/advisories/61506).