Summary
Several vulnerabilities have been
discovered in libvncserver, a library to implement VNC server functionality.
These vulnerabilities might result in the execution of arbitrary code or denial of service in both the client and the server side.
Solution
For the stable distribution (wheezy),
these problems have been fixed in version 0.9.9+dfsg-1+deb7u1.
For the unstable distribution (sid), these problems have been fixed in version 0.9.9+dfsg-6.1.
We recommend that you upgrade your libvncserver packages.
Affected
libvncserver on Debian Linux
Detection
This check tests the installed software
version using the apt package manager.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2014-6051, CVE-2014-6052, CVE-2014-6053, CVE-2014-6054, CVE-2014-6055 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities