The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial of service (infinite loop, CPU and disk consumption) via multiple crafted requests during authentication.

The remote Solaris system is missing necessary patches to address security updates :

  - The vino_server_client_data_pending function in     vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and     earlier, and 3.8 when encryption is disabled, does not     properly clear client data when an error causes the     connection to close during authentication, which allows     remote attackers to cause a denial of service (infinite     loop, CPU and disk consumption) via multiple crafted     requests during authentication. (CVE-2013-5745)

vino has been updated to fix a remote denial of service problem where remote attackers could have caused a infinite loop in vino (CPU consumption). (CVE-2013-5745)

Fix denial of service (CVE-2013-5745)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A denial of service flaw was found in the way Vino handled certain authenticated requests from clients that were in the deferred state. A remote attacker could use this flaw to make the vino-server process enter an infinite loop when processing those incoming requests.
(CVE-2013-5745)

The GNOME session must be restarted (log out, then log back in) for this update to take effect.

Updated vino packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Vino is a Virtual Network Computing (VNC) server for GNOME. It allows remote users to connect to a running GNOME session using VNC.

A denial of service flaw was found in the way Vino handled certain authenticated requests from clients that were in the deferred state. A remote attacker could use this flaw to make the vino-server process enter an infinite loop when processing those incoming requests.
(CVE-2013-5745)

All vino users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The GNOME session must be restarted (log out, then log back in) for this update to take effect.

From Red Hat Security Advisory 2013:1452 :

Updated vino packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Vino is a Virtual Network Computing (VNC) server for GNOME. It allows remote users to connect to a running GNOME session using VNC.

A denial of service flaw was found in the way Vino handled certain authenticated requests from clients that were in the deferred state. A remote attacker could use this flaw to make the vino-server process enter an infinite loop when processing those incoming requests.
(CVE-2013-5745)

All vino users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The GNOME session must be restarted (log out, then log back in) for this update to take effect.

Jonathan Claudius discovered that Vino incorrectly handled closing invalid connections. A remote attacker could use this issue to cause Vino to consume resources, resulting in a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
80798	Oracle Solaris Third-Party Patch Update : vino (cve_2013_5745_input_validation)	Nessus	Solaris Local Security Checks	high
70781	SuSE 11.2 / 11.3 Security Update : vino (SAT Patch Numbers 8442 / 8443)	Nessus	SuSE Local Security Checks	high
70593	Fedora 19 : vino-3.8.1-3.fc19 (2013-17121)	Nessus	Fedora Local Security Checks	high
70578	Scientific Linux Security Update : vino on SL5.x, SL6.x i386/x86_64 (20131022)	Nessus	Scientific Linux Local Security Checks	high
70572	CentOS 5 / 6 : vino (CESA-2013:1452)	Nessus	CentOS Local Security Checks	high
70555	RHEL 5 / 6 : vino (RHSA-2013:1452)	Nessus	Red Hat Local Security Checks	high
70552	Oracle Linux 5 / 6 : vino (ELSA-2013-1452)	Nessus	Oracle Linux Local Security Checks	high
70255	Ubuntu 12.04 LTS / 12.10 / 13.04 : vino vulnerability (USN-1980-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2013-5745

high

Tenable Plugins

high

high

high

high

high

high

high

high