RHSA-2014:1826Medium
Red Hat Security Advisory: libvncserver security update
🔗 CVE IDs covered (5)
📋 Description
CVE-2014-6051 — libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling CVE-2014-6052 — libvncserver: NULL pointer dereference flaw in framebuffer setup CVE-2014-6053 — libvncserver: server NULL pointer dereference flaw in ClientCutText message handling CVE-2014-6054 — libvncserver: server divide-by-zero flaw in scaling factor handling CVE-2014-6055 — libvncserver: server stacked-based buffer overflow flaws in file transfer handling
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2014:1826
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1144287
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1144288
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1144289
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1144291
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1144293
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1826.json