Synopsis: Moderate: libvncserver security update
Advisory ID: SLSA-2014:1826-1
Issue Date: 2014-11-11
CVE Numbers: CVE-2014-6051
CVE-2014-6052
CVE-2014-6053
CVE-2014-6054
CVE-2014-6055
—
An integer overflow flaw, leading to a heap-based buffer overflow, was
found in the way screen sizes were handled by LibVNCServer. A malicious
VNC server could use this flaw to cause a client to crash or, potentially,
execute arbitrary code in the client. (CVE-2014-6051)
A NULL pointer dereference flaw was found in LibVNCServer’s framebuffer
setup. A malicious VNC server could use this flaw to cause a VNC client to
crash. (CVE-2014-6052)
A NULL pointer dereference flaw was found in the way LibVNCServer handled
certain ClientCutText message. A remote attacker could use this flaw to
crash the VNC server by sending a specially crafted ClientCutText message
from a VNC client. (CVE-2014-6053)
A divide-by-zero flaw was found in the way LibVNCServer handled the
scaling factor when it was set to “0”. A remote attacker could use this
flaw to crash the VNC server using a malicious VNC client. (CVE-2014-6054)
Two stack-based buffer overflow flaws were found in the way LibVNCServer
handled file transfers. A remote attacker could use this flaw to crash the
VNC server using a malicious VNC client. (CVE-2014-6055)
All running applications linked against libvncserver must be restarted for
this update to take effect.
—
SL6
x86_64
libvncserver-0.9.7-7.el6_6.1.x86_64.rpm
libvncserver-debuginfo-0.9.7-7.el6_6.1.x86_64.rpm
libvncserver-0.9.7-7.el6_6.1.i686.rpm
libvncserver-debuginfo-0.9.7-7.el6_6.1.i686.rpm
libvncserver-devel-0.9.7-7.el6_6.1.i686.rpm
libvncserver-devel-0.9.7-7.el6_6.1.x86_64.rpm
i386
libvncserver-0.9.7-7.el6_6.1.i686.rpm
libvncserver-debuginfo-0.9.7-7.el6_6.1.i686.rpm
libvncserver-devel-0.9.7-7.el6_6.1.i686.rpm
SL7
x86_64
libvncserver-0.9.9-9.el7_0.1.i686.rpm
libvncserver-0.9.9-9.el7_0.1.x86_64.rpm
libvncserver-debuginfo-0.9.9-9.el7_0.1.i686.rpm
libvncserver-debuginfo-0.9.9-9.el7_0.1.x86_64.rpm
libvncserver-devel-0.9.9-9.el7_0.1.i686.rpm
libvncserver-devel-0.9.9-9.el7_0.1.x86_64.rpm
– Scientific Linux Development Team
