CVE-2011-0904
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a…
Does this matter?
Lower severity and a low EPSS score (2.30%). Track it; it rarely justifies an emergency change on its own.
Description
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via a large (1) X position or (2) Y position value in a framebuffer update request that triggers an out-of-bounds memory access, related to the rfbTranslateNone and rfbSendRectEncodingRaw functions.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:N/A:P
- EPSS
- 2.30% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- david king/vino
- Source
- cve@mitre.org
References
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.28/vino-2.28.3.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/3.0/vino-3.0.2.news
- http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0Patch
- http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522fPatch
- http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279Patch
- http://git.gnome.org/browse/vino/commit/?id=d050a22b1c284b633c407ef92fde95c47e8fdb8aPatch
- http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4Patch
- http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975dPatch
- http://git.gnome.org/browse/vino/log/?h=gnome-2-30Patch
- http://git.gnome.org/browse/vino/tree/NEWS
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
- http://rhn.redhat.com/errata/RHSA-2013-0169.html
- http://secunia.com/advisories/44410Vendor Advisory
- http://secunia.com/advisories/44463Vendor Advisory
- http://www.debian.org/security/2011/dsa-2238
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:087
- http://www.securityfocus.com/bid/47681
- http://www.ubuntu.com/usn/usn-1128-1/
- http://www.vupen.com/english/advisories/2011/1144Vendor Advisory
- https://bugzilla.gnome.org/show_bug.cgi?id=641802Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=694455Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67243
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.28/vino-2.28.3.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/3.0/vino-3.0.2.news
- http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0Patch
- http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522fPatch
- http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279Patch
- http://git.gnome.org/browse/vino/commit/?id=d050a22b1c284b633c407ef92fde95c47e8fdb8aPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.