PT-2013-6350 · Gnome+3 · Gnome Vino+3

Jonathan Claudius · Published 1970-01-01 · Updated 2013-12-01 · CVE-2013-5745

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GNOME Vino versions 2.26.1 through 3.7.3 GNOME Vino version 3.8 when encryption is disabled

Description The issue is related to the vino server client data pending function in vino-server.c, which does not properly clear client data when an error causes the connection to close during authentication. This allows remote attackers to cause a denial of service via multiple crafted requests during authentication, leading to an infinite loop, CPU, and disk consumption.

Recommendations For GNOME Vino versions 2.26.1 through 3.7.3, update to a version where the vino server client data pending function is properly fixed. For GNOME Vino version 3.8, enable encryption to prevent exploitation. As a temporary workaround, consider disabling the vino server client data pending function until a patch is available. Restrict access to the vino-server.c module to minimize the risk of exploitation.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2015-04377

BDU:2015-04378

CESA-2013_1452

CVE-2013-5745

MGASA-2013-0300

RHSA-2013:1452

RHSA-2013_1452

SUSE-SU-2013_1631-1

SUSE-SU-2013_1631-2

Affected Products

Centos

Gnome Vino

Red Hat

Suse

References · 34

• 🔥 https://exploit-db.com/exploits/28338 · Exploit
• https://bugzilla.gnome.org/show_bug.cgi?id=707905 · Vendor Advisory
• http://ubuntu.com/usn/USN-1980-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5745 · Security Note
• http://secunia.com/advisories/55090 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2013-0300.html · Security Note
• https://linux.oracle.com/errata/ELSA-2013-1452.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2013-0300 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5745 · Security Note
• https://bdu.fstec.ru/vul/2015-04377 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00003.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1452.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-5745 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-5745 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04378 · Security Note