USN-4573-1

Dashboard / Vulnerabilities / USN-4573-1

USN-4573-1

Summary: vino vulnerabilities

Details: Nicolas Ruff discovered that Vino incorrectly handled large ClientCutText messages. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service. (CVE-2014-6053) It was discovered that Vino incorrectly handled certain packet lengths. A remote attacker could possibly use this issue to obtain sensitive information, cause a denial of service, or execute arbitrary code. (CVE-2018-7225) Pavel Cheremushkin discovered that an information disclosure vulnerability existed in Vino when sending a ServerCutText message. An attacker could possibly use this issue to expose sensitive information. (CVE-2019-15681) It was discovered that Vino incorrectly handled region clipping. A remote attacker could possibly use this issue to cause Vino to crash, resulting in a denial of service. (CVE-2020-14397) It was discovered that Vino incorrectly handled encodings. A remote attacker could use this issue to cause Vino to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-14402, CVE-2020-14403, CVE-2020-14404)

References: https://ubuntu.com/security/notices/USN-4573-1, https://ubuntu.com/security/CVE-2014-6053, https://ubuntu.com/security/CVE-2018-7225, https://ubuntu.com/security/CVE-2019-15681, https://ubuntu.com/security/CVE-2020-14397, https://ubuntu.com/security/CVE-2020-14402, https://ubuntu.com/security/CVE-2020-14403, https://ubuntu.com/security/CVE-2020-14404