Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2014-6055
HistorySep 30, 2014 - 4:55 p.m.

CVE-2014-6055

2014-09-3016:55:07
CWE-119
mitre
web.nvd.nist.gov
59
cve-2014-6055
buffer overflow
remote code execution
libvncserver
file transfer
denial of service
nvd

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8.4

Confidence

High

EPSS

0.022

Percentile

89.5%

JSON

Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.

Affected configurations

Nvd
Node
fedoraprojectfedoraMatch20
OR
fedoraprojectfedoraMatch21
Node
debiandebian_linuxMatch7.0
Node
redhatenterprise_linux_server_ausMatch6.5
OR
redhatenterprise_linux_server_eusMatch6.5.z
Node
libvncserverlibvncserverRange≤0.9.9
VendorProductVersionCPE
fedoraprojectfedora21cpe:/o:fedoraproject:fedora:21:::
fedoraprojectfedora20cpe:/o:fedoraproject:fedora:20:::

References

Related

ubuntucve 1
freebsd 2
cvelist 1
nessus 27
prion 1
debiancve 1
nvd 1
redhat 3
centos 2
mageia 3
openvas 23
oraclelinux 2
debian 3
osv 4
securityvulns 2
veracode 3
archlinux 1
gentoo 1
ubuntu 2
fedora 4
ubuntucve
ubuntucve
CVE-2014-6055
2014-09-24 00:00:00
freebsd
freebsd
krfb -- Multiple security issues in bundled libvncserver
2014-09-23 00:00:00
libvncserver -- multiple security vulnerabilities
2014-09-23 00:00:00
cvelist
cvelist
CVE-2014-6055
2014-09-30 16:00:00
nessus
nessus
FreeBSD : krfb -- Multiple security issues in bundled libvncserver (fb25333d-442f-11e4-98f3-5453ed2e2b49)
2014-09-25 00:00:00
RHEL 6 : libvncserver (RHSA-2015:0113)
2015-02-03 00:00:00
RHEL 7 : kdenetwork (RHSA-2014:1827)
2014-11-12 00:00:00
prion
prion
Stack overflow
2014-09-30 16:55:00
debiancve
debiancve
CVE-2014-6055
2014-09-30 16:55:07
nvd
nvd
CVE-2014-6055
2014-09-30 16:55:07
redhat
redhat
(RHSA-2015:0113) Moderate: libvncserver security update
2015-02-02 00:00:00
(RHSA-2014:1827) Moderate: kdenetwork security update
2014-11-11 14:45:20
(RHSA-2014:1826) Moderate: libvncserver security update
2014-11-11 00:00:00
centos
centos
kdenetwork security update
2014-11-12 09:44:41
libvncserver security update
2014-11-11 18:36:28
mageia
mageia
Updated kdenetwork4 packages fix security vulnerabilities in krfb
2014-11-21 15:44:16
Updated libvncserver & remmina packages fix security vulnerabilities
2014-10-07 13:22:51
Updated KDE 4 and related packages move to KDE 4.12.5
2014-10-29 14:30:40
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0466)
2022-01-28 00:00:00
RedHat Update for kdenetwork RHSA-2014:1827-01
2014-11-12 00:00:00
Oracle: Security Advisory (ELSA-2014-1827)
2015-10-06 00:00:00
oraclelinux
oraclelinux
kdenetwork security update
2014-11-11 00:00:00
libvncserver security update
2014-11-11 00:00:00
debian
debian
[SECURITY] [DSA 3081-1] libvncserver security update
2014-11-29 15:21:35
[SECURITY] [DLA 197-1] libvncserver security update
2015-04-14 16:05:48
[SECURITY] [DLA 1979-1] italc security update
2019-10-30 22:21:35
osv
osv
libvncserver - security update
2015-04-14 00:00:00
libvncserver - security update
2014-11-29 00:00:00
italc vulnerabilities
2020-10-20 16:35:20
securityvulns
securityvulns
libvncserver multiple security vulnerabilities
2014-09-29 00:00:00
[oCERT-2014-007] libvncserver multiple issues
2014-09-29 00:00:00
veracode
veracode
Denial Of Service (DoS) Through Divide By Zero
2019-05-02 05:04:38
Arbitrary Code Execution
2019-05-02 05:04:38
Arbitrary Code Execution
2019-05-02 05:04:38
archlinux
archlinux
libvncserver: remote code execution, denial of service
2014-10-24 00:00:00
gentoo
gentoo
LibVNCServer: Multiple vulnerabilities
2015-07-07 00:00:00
ubuntu
ubuntu
LibVNCServer vulnerabilities
2014-09-29 00:00:00
iTALC vulnerabilities
2020-10-20 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: libvncserver-0.9.10-0.6.20140718git9453be42.fc20
2014-09-29 04:06:45
[SECURITY] Fedora 21 Update: libvncserver-0.9.10-0.6.20140718git9453be42.fc21
2014-10-01 04:23:42
[SECURITY] Fedora 19 Update: krfb-4.11.5-4.fc19
2014-10-08 19:11:38

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8.4

Confidence

High

EPSS

0.022

Percentile

89.5%

JSON
Related for CVE-2014-6055
ubuntucve1freebsd2cvelist1nessus27prion1debiancve1nvd1redhat3centos2mageia3openvas23oraclelinux2debian3osv4securityvulns2veracode3archlinux1gentoo1ubuntu2fedora4