[SECURITY] [DLA 197-1] libvncserver security update

2015-04-1416:05:48

lists.debian.org

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.8

Confidence

High

EPSS

0.886

Percentile

98.8%

JSON

Package : libvncserver
Version : 0.9.7-2+deb6u1
CVE ID : CVE-2014-6051 CVE-2014-6052 CVE-2014-6053 CVE-2014-6054
CVE-2014-6055
Debian Bug : 762745

Several vulnerabilities have been discovered in libvncserver, a library to
implement VNC server functionality. These vulnerabilities might result in
the execution of arbitrary code or denial of service in both the client
and the server side.

For the oldstable distribution (squeeze), these problems have been fixed in
version 0.9.7-2+deb6u1.

This update has been prepared by Nguyen Cong.

–
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/
Attachment:
signature.asc
Description: Digital signature

OSVersionArchitecturePackageVersionFilename
Debian8i386italc-master< 1:2.0.2+dfsg1-2+deb8u1italc-master_1:2.0.2+dfsg1-2+deb8u1_i386.deb
Debian8armhfitalc-client< 1:2.0.2+dfsg1-2+deb8u1italc-client_1:2.0.2+dfsg1-2+deb8u1_armhf.deb
Debian6i386linuxvnc< 0.9.7-2+deb6u1linuxvnc_0.9.7-2+deb6u1_i386.deb
Debian7amd64libvncserver-config< 0.9.9+dfsg-1+deb7u1libvncserver-config_0.9.9+dfsg-1+deb7u1_amd64.deb
Debian7ia64libvncserver0-dbg< 0.9.9+dfsg-1+deb7u1libvncserver0-dbg_0.9.9+dfsg-1+deb7u1_ia64.deb
Debian7kfreebsd-amd64libvncserver-dev< 0.9.9+dfsg-1+deb7u1libvncserver-dev_0.9.9+dfsg-1+deb7u1_kfreebsd-amd64.deb
Debian7s390xlibvncserver-dev< 0.9.9+dfsg-1+deb7u1libvncserver-dev_0.9.9+dfsg-1+deb7u1_s390x.deb
Debian8amd64italc-master-dbg< 1:2.0.2+dfsg1-2+deb8u1italc-master-dbg_1:2.0.2+dfsg1-2+deb8u1_amd64.deb
Debian7armhflibvncserver0-dbg< 0.9.9+dfsg-1+deb7u1libvncserver0-dbg_0.9.9+dfsg-1+deb7u1_armhf.deb
Debian7powerpclibvncserver0-dbg< 0.9.9+dfsg-1+deb7u1libvncserver0-dbg_0.9.9+dfsg-1+deb7u1_powerpc.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	i386	italc-master	< 1:2.0.2+dfsg1-2+deb8u1	italc-master_1:2.0.2+dfsg1-2+deb8u1_i386.deb
Debian	8	armhf	italc-client	< 1:2.0.2+dfsg1-2+deb8u1	italc-client_1:2.0.2+dfsg1-2+deb8u1_armhf.deb
Debian	6	i386	linuxvnc	< 0.9.7-2+deb6u1	linuxvnc_0.9.7-2+deb6u1_i386.deb
Debian	7	amd64	libvncserver-config	< 0.9.9+dfsg-1+deb7u1	libvncserver-config_0.9.9+dfsg-1+deb7u1_amd64.deb
Debian	7	ia64	libvncserver0-dbg	< 0.9.9+dfsg-1+deb7u1	libvncserver0-dbg_0.9.9+dfsg-1+deb7u1_ia64.deb
Debian	7	kfreebsd-amd64	libvncserver-dev	< 0.9.9+dfsg-1+deb7u1	libvncserver-dev_0.9.9+dfsg-1+deb7u1_kfreebsd-amd64.deb
Debian	7	s390x	libvncserver-dev	< 0.9.9+dfsg-1+deb7u1	libvncserver-dev_0.9.9+dfsg-1+deb7u1_s390x.deb
Debian	8	amd64	italc-master-dbg	< 1:2.0.2+dfsg1-2+deb8u1	italc-master-dbg_1:2.0.2+dfsg1-2+deb8u1_amd64.deb
Debian	7	armhf	libvncserver0-dbg	< 0.9.9+dfsg-1+deb7u1	libvncserver0-dbg_0.9.9+dfsg-1+deb7u1_armhf.deb
Debian	7	powerpc	libvncserver0-dbg	< 0.9.9+dfsg-1+deb7u1	libvncserver0-dbg_0.9.9+dfsg-1+deb7u1_powerpc.deb