NVD

Id
33665  
Name
CVE-2014-6053  
Description
The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows remote attackers to cause a denial of service (memory consumption or daemon crash) via a crafted message that is processed by using a single unchecked malloc.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-12-15  
Modified Date
2016-12-21  
Seq
2014-6053  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
174896 33665 CVE-2014-6053 openSUSE-SU-2015:2207  View
174897 33665 CVE-2014-6053 [oss-security] 20140923 Multiple issues in libVNCserver  View
174898 33665 CVE-2014-6053 USN-2365-1  View
174899 33665 CVE-2014-6053 DSA-3081  View
174900 33665 CVE-2014-6053 http://www.ocert.org/advisories/ocert-2014-007.html  View
174901 33665 CVE-2014-6053 [oss-security] 20140925 [oCERT-2014-007] libvncserver multiple issues  View
174902 33665 CVE-2014-6053 https://github.com/newsoft/libvncserver/commit/6037a9074d52b1963c97cb28ea1096c7c14cbf28  View
174903 33665 CVE-2014-6053 GLSA-201507-07  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18349 JVNDB-2014-007224 LibVNCServer の libvncserver/rfbserver.c 内の rfbProcessClientNormalMessage 関数におけるサービス運用妨害 (DoS) の脆弱性 LibVNCServer の libvncserver/rfbserver.c 内の rfbProcessClientNormalMessage 関数は、大量の ClientCutText データ送信の試行を適切に処理しないため、サービス運用妨害 (メモリ消費またはデーモンクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-6053 73344 CVE-2014-6053 33665 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007224.html 2014-08-18 2014-12-17 View