[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2013-1452 -- Oracle vino

ID: oval:org.secpod.oval:def:1500267Date: (C)2013-11-12   (M)2023-12-07
Class: PATCHFamily: unix




Updated vino packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System base score, which gives a detailed severity rating, is available from the CVE link in the References section. Vino is a Virtual Network Computing server for GNOME. It allows remote users to connect to a running GNOME session using VNC. A denial of service flaw was found in the way Vino handled certain authenticated requests from clients that were in the deferred state. A remote attacker could use this flaw to make the vino-server process enter an infinite loop when processing those incoming requests. All vino users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The GNOME session must be restarted for this update to take effect.

Platform:
Oracle Linux 6
Product:
vino
Reference:
ELSA-2013-1452
CVE-2013-5745
CVE    1
CVE-2013-5745
CPE    2
cpe:/a:vino:vino
cpe:/o:oracle:linux:6

© SecPod Technologies