Search for vulnerabilities
Vulnerability ID | VCID-dqah-vhpy-aaaf |
Aliases |
CVE-2013-5745
|
Summary | The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial of service (infinite loop, CPU and disk consumption) via multiple crafted requests during authentication. |
Status | Published |
Exploitability | 2.0 |
Weighted Severity | 6.4 |
Risk | 10.0 |
Affected and Fixed Packages | Package Details |
CWE-20 | Improper Input Validation |
CWE-400 | Uncontrolled Resource Consumption |
Data source | Exploit-DB |
---|---|
Date added | Sept. 17, 2013 |
Description | Vino VNC Server 3.7.3 - Persistent Denial of Service |
Ransomware campaign use | Known |
Source publication date | Sept. 17, 2013 |
Exploit type | dos |
Platform | linux |
Source update date | Sept. 17, 2013 |
Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
Percentile | 0.95155 |
EPSS Score | 0.20105 |
Published At | May 18, 2025, 12:55 p.m. |
Date | Actor | Action | Source | VulnerableCode Version |
---|---|---|---|---|
There are no relevant records. |