Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial of service (infinite loop, CPU and disk consumption) via multiple crafted requests during authentication.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNOME Vino VNC Server 拒绝服务漏洞
Vulnerability Description
Vino是英国程序员David King所研发的一套Linux发行版所附带的VNC服务器软件，也是一套远程控制软件。 当禁用加密时，GNOME Vino 3.7.3及之前的版本中的vino-server.c文件中的vino_server_client_data_pending函数中存在拒绝服务漏洞，该漏洞源于当执行身份验证过程中产生的错误导致连接断开时，程序没有正确清除客户端数据。远程攻击者可通过发送多个特制的请求，利用该漏洞造成拒绝服务（无限循环，CPU和磁盘消耗）。
CVSS Information
N/A
Vulnerability Type
N/A