CESA-2013:1452 -- centos 5 vinoID: oval:org.secpod.oval:def:202955 | Date: (C)2013-11-07 (M)2023-12-07 |
Class: PATCH | Family: unix |
Vino is a Virtual Network Computing server for GNOME. It allows remote users to connect to a running GNOME session using VNC. A denial of service flaw was found in the way Vino handled certain authenticated requests from clients that were in the deferred state. A remote attacker could use this flaw to make the vino-server process enter an infinite loop when processing those incoming requests. All vino users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The GNOME session must be restarted for this update to take effect.