CVE-2014-6055: Buffer Overflow
Last updated 24 July 2024
Other sources
Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.
— Launchpad
Two stack-based buffer overflow flaws were reported in LibVNCServer's file transfer handling. A VNC client could use these flaws to cause the VNC server to crash or, potentially, execute arbitrary code.
Upstream commits:
https://github.com/newsoft/libvncserver/commit/06ccdf016154fde8eccb5355613ba04c59127b2e
https://github.com/newsoft/libvncserver/commit/f528072216dec01cee7ca35d94e171a3b909e677
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libvncserverto a version that resolves this vulnerability.Fixed in 0.9.13+dfsg-2+deb11u1Fixed in 0.9.14+dfsg-1Fixed in 0.9.15+dfsg-1 - Upgrade
Upgrade
LibVNCServerto a version that resolves this vulnerability.Patch 06ccdf016154fde8eccb5355613ba04c59127b2e - Upgrade
Upgrade
LibVNCServerto a version that resolves this vulnerability.Patch f528072216dec01cee7ca35d94e171a3b909e677
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2014-6055.
What is the severity level of CVE-2014-6055?
The severity level of CVE-2014-6055 is medium, with a severity value of 6.5.
Which software versions are affected by CVE-2014-6055?
CVE-2014-6055 affects LibVNCServer 0.9.9 and earlier, Fedora 20 and 21, Debian Linux 7.0, Red Hat Enterprise Linux Server Aus 6.5, Red Hat Enterprise Linux Server Eus 6.5.z, and Ubuntu packages krfb and libvncserver.
How can a remote authenticated user exploit CVE-2014-6055?
A remote authenticated user can exploit CVE-2014-6055 by causing a denial of service (crash) and possibly executing arbitrary code via a long file or directory name or the FileTime attribute in a rfbserver.c file.
Where can I find more information about CVE-2014-6055?
You can find more information about CVE-2014-6055 at the following references: [link1](http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139654.html), [link2](http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.html), [link3](http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html).