CVE-2014-6051

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2014-October/139654.html · Third Party Advisory
• lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2015-12/msg00022.html
• rhn.redhat.com/errata/RHSA-2015-0113.html · Third Party Advisory
• seclists.org/oss-sec/2014/q3/639 · Third Party Advisory
• secunia.com/advisories/61506 · Permissions Required
• debian.org/security/2014/dsa-3081 · Third Party Advisory
• ocert.org/advisories/ocert-2014-007.html · Patch
• openwall.com/lists/oss-security/2014/09/25/11 · Third Party Advisory
• oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html · Third Party Advisory
• securityfocus.com/bid/70093

libvncserver のその他の脆弱性

• CVE-2014-6053中 5.0The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts t…
• CVE-2014-6052高 7.5The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values…
• CVE-2014-6054中 4.3The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a …
• CVE-2014-6055中 6.5Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticat…
• CVE-2006-2450高 7.5auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure securi…