Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Vino could be made to hang if it received specially crafted network
traffic.
Software Description:
- vino: VNC server for GNOME
Details:
Jonathan Claudius discovered that Vino incorrectly handled closing invalid
connections. A remote attacker could use this issue to cause Vino to
consume resources, resulting in a denial of service.
The problem can be corrected by updating your system to the following package versions: Ubuntu 13.04: vino 3.6.2-0ubuntu4.1 Ubuntu 12.10: vino 3.6.0-0ubuntu1.2 Ubuntu 12.04 LTS: vino 3.4.2-0ubuntu1.3 After a standard system update you need to restart your session to make all the necessary changes.
https://ubuntu.com/security/notices/USN-1980-1
CVE-2013-5745
Get the latest Linux and open source security news straight to your inbox.