CVE-2014-6053
Medium
Description
The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.
SeverityMedium
CVSS5.0
Exploit probability94. percentile7.3%
Product
Libvncserver
PublishedDec 15, 2014
First seenDec 15, 2014
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libvncserver libvncserver | v ≤ 0.9.9 | — |
| canonical ubuntu_linux | 12.04, 14.04 | — |
| debian debian_linux | 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.