CVE-2011-0905
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause…
Does this matter?
Lower severity and a low EPSS score (1.50%). Track it; it rarely justifies an emergency change on its own.
Description
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:N/A:P
- EPSS
- 1.50% probability · 73th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- david king/vino
- Source
- cve@mitre.org
References
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.28/vino-2.28.3.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/3.0/vino-3.0.2.news
- http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0Patch
- http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522fPatch
- http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279Patch
- http://git.gnome.org/browse/vino/commit/?id=d050a22b1c284b633c407ef92fde95c47e8fdb8aPatch
- http://git.gnome.org/browse/vino/commit/?id=dff52694a384fe95195f2211254026b752d63ec4Patch
- http://git.gnome.org/browse/vino/commit/?id=e17bd4e369f90748654e31a4867211dc7610975dPatch
- http://git.gnome.org/browse/vino/log/?h=gnome-2-30Patch
- http://git.gnome.org/browse/vino/tree/NEWS
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
- http://rhn.redhat.com/errata/RHSA-2013-0169.html
- http://secunia.com/advisories/44410Vendor Advisory
- http://secunia.com/advisories/44463Vendor Advisory
- http://www.debian.org/security/2011/dsa-2238
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:087
- http://www.securityfocus.com/bid/47681
- http://www.ubuntu.com/usn/usn-1128-1/
- http://www.vupen.com/english/advisories/2011/1144Vendor Advisory
- https://bugzilla.gnome.org/show_bug.cgi?id=641803
- https://bugzilla.redhat.com/show_bug.cgi?id=694456Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67244
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.28/vino-2.28.3.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news
- http://ftp.gnome.org/pub/GNOME/sources/vino/3.0/vino-3.0.2.news
- http://git.gnome.org/browse/vino/commit/?id=0c2c9175963fc56bf2af10e42867181332f96ce0Patch
- http://git.gnome.org/browse/vino/commit/?id=456dadbb5c5971d3448763a44c05b9ad033e522fPatch
- http://git.gnome.org/browse/vino/commit/?id=8beefcf7792d343c10c919ee0c928c81f73b1279Patch
- http://git.gnome.org/browse/vino/commit/?id=d050a22b1c284b633c407ef92fde95c47e8fdb8aPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.