ISOMAN

CVE

CVE-2014-6054

The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service (divide-by-zero error and server crash) via a zero value in the scaling factor in a (1) PalmVNCSetScaleFactor or (2) SetScale message.

Severity
MEDIUM
CVSS
4.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html
  2. http://seclists.org/oss-sec/2014/q3/639
  3. http://secunia.com/advisories/61506
  4. http://secunia.com/advisories/61682
  5. http://www.debian.org/security/2014/dsa-3081
  6. http://www.ocert.org/advisories/ocert-2014-007.html
  7. http://www.openwall.com/lists/oss-security/2014/09/25/11
  8. http://www.securityfocus.com/bid/70094
  9. http://www.ubuntu.com/usn/USN-2365-1
  10. https://github.com/newsoft/libvncserver/commit/05a9bd41a8ec0a9d580a8f420f41718bdd235446
  11. https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
  12. https://security.gentoo.org/glsa/201507-07
  13. https://usn.ubuntu.com/4587-1/
  14. http://lists.opensuse.org/opensuse-updates/2015-12/msg00022.html
  15. http://seclists.org/oss-sec/2014/q3/639
  16. http://secunia.com/advisories/61506
  17. http://secunia.com/advisories/61682
  18. http://www.debian.org/security/2014/dsa-3081
  19. http://www.ocert.org/advisories/ocert-2014-007.html
  20. http://www.openwall.com/lists/oss-security/2014/09/25/11