Package        : vino
Version        : 3.14.0-2+deb8u1
CVE ID         : CVE-2014-6053 CVE-2018-7225 CVE-2019-15681
Debian Bug     : 945784


Several vulnerabilities have been identified in the VNC code of vino, a
desktop sharing utility for the GNOME desktop environment.

The vulnerabilities referenced below are issues that have originally been
reported against Debian source package libvncserver. The vino source
package in Debian ships a custom-patched and stripped down variant of
libvncserver, thus some of libvncserver's security fixes required porting
over.

CVE-2014-6053

    The rfbProcessClientNormalMessage function in
    libvncserver/rfbserver.c in LibVNCServer did not properly handle
    attempts to send a large amount of ClientCutText data, which allowed
    remote attackers to cause a denial of service (memory consumption or
    daemon crash) via a crafted message that was processed by using a
    single unchecked malloc.

CVE-2018-7225

    An issue was discovered in LibVNCServer.
    rfbProcessClientNormalMessage() in rfbserver.c did not sanitize
    msg.cct.length, leading to access to uninitialized and potentially
    sensitive data or possibly unspecified other impact (e.g., an integer
    overflow) via specially crafted VNC packets.

CVE-2019-15681

    LibVNC contained a memory leak (CWE-655) in VNC server code, which
    allowed an attacker to read stack memory and could be abused for
    information disclosure. Combined with another vulnerability, it could
    be used to leak stack memory and bypass ASLR. This attack appeared to
    be exploitable via network connectivity.


For Debian 8 "Jessie", these problems have been fixed in version
3.14.0-2+deb8u1.

We recommend that you upgrade your vino packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-- 

mike gabriel aka sunweaver (Debian Developer)
fon: +49 (1520) 1976 148

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: sunweaver@debian.org, https://sunweavers.net/