Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
David King Vino帧缓冲更新处理拒绝服务漏洞
Vulnerability Description
Vino中存在拒绝服务漏洞。该漏洞是由于当处理客户端帧缓冲更新请求时，server/libvncserver/rfbserver.c中的“rfbSendFramebufferUpdate()”函数产生的错误导致的。远程攻击者可以借助特制帧缓冲更新请求包，导致拒绝服务（守护进程崩溃），该请求可触发越界读取操作。
CVSS Information
N/A
Vulnerability Type
N/A