CVE-2013-5745
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2013-5745
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2013-5745.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2013-5745
- Related
- Published
- 2013-10-01T17:55:03Z
- Modified
- 2025-04-11T00:51:21Z
- Downstream
- Summary
- [none]
- Details
-
The vinoserverclientdatapending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial of service (infinite loop, CPU and disk consumption) via multiple crafted requests during authentication.
- References
-
- http://rhn.redhat.com/errata/RHSA-2013-1452.html
- http://secunia.com/advisories/55090
- http://www.ubuntu.com/usn/USN-1980-1
- https://bugzilla.gnome.org/show_bug.cgi?id=641811
- https://bugzilla.gnome.org/show_bug.cgi?id=707905
- https://www.trustwave.com/spiderlabs/advisories/TWSL2013-028.txt
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00003.html
- https://security-tracker.debian.org/tracker/CVE-2013-5745
Affected packages
Debian:11 / vino
Package
- Name
- vino
- Purl
- pkg:deb/debian/vino?arch=source
Debian:12 / vino
Package
- Name
- vino
- Purl
- pkg:deb/debian/vino?arch=source