7.1

CVE-2013-5745: canonical ubuntu_linux Improper Input Validation

CVSS: 7.1v2.0HighModified
AliasesMGASA-2013-0300RHSA-2013:1452DEBIAN-CVE-2013-5745
Published 01-10-2013Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2013-5745 is a high (CVSS 7.1) Improper Input Validation vulnerability in canonical ubuntu_linux. EPSS estimates a 8.72% chance of exploitation in the next 30 days, higher than 95% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
40/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v2.0 (NVD)
EPSS score
8.72%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database

Timeline

  1. 01-10-2013
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial of service (infinite loop, CPU and disk consumption) via multiple crafted requests during authentication.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

8.72%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.72% on 19-09-2026

19-09-202619-10-2026
EPSS score
8.72%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • exploit-databasedoslinuxVerified

    Vino VNC Server 3.7.3 - Persistent Denial of Service

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Mageia2 products
  • vino< 3.4.2-1.2.mga2
  • vino< 3.7.3-2.1.mga3
Redhat2 products
  • vino< 0:2.13.5-10.el5_10 | < 0:2.28.1-9.el6_4
  • vino-debuginfo< 0:2.13.5-10.el5_10 | < 0:2.28.1-9.el6_4
Canonical1 product
David_king1 product
  • vino≤ 3.7.3 | 0.12 | 0.14 | 2.7 | 2.7.3 | 2.7.3.1 | 2.7.4 | 2.7.4.90 | 2.7.4.91 | 2.7.90 | 2.7.91 | 2.7.92 | 2.8 | 2.8.0 | 2.8.0.1 | 2.8.1 | 2.9 | 2.9.2 | 2.10 | 2.11 | 2.11.1 | 2.11.1.1 | 2.11.1.2 | 2.11.90 | 2.11.92 | 2.12 | 2.13 | 2.13.5 | 2.14 | 2.15 | 2.16 | 2.17 | 2.17.2 | 2.17.4 | 2.17.5 | 2.17.92 | 2.18 | 2.18.1 | 2.19 | 2.19.5 | 2.19.90 | 2.19.92 | 2.20 | 2.20.1 | 2.21 | 2.21.1 | 2.21.2 | 2.21.3 | 2.21.90 | 2.21.91 | 2.21.92 | 2.22 | 2.22.1 | 2.22.2 | 2.23 | 2.23.5 | 2.23.90 | 2.23.91 | 2.23.92 | 2.24 | 2.24.1 | 2.25 | 2.25.3 | 2.25.4 | 2.25.5 | 2.25.90 | 2.25.91 | 2.25.92 | 2.26 | 2.26.1 | 2.26.2 | 2.27 | 2.27.5 | 2.27.90 | 2.27.91 | 2.27.92 | 2.28 | 2.28.1 | 2.28.2 | 2.28.3 | 2.31.4 | 2.31.91 | 2.32.0 | 2.32.1 | 2.32.2 | 2.99.0 | 2.99.1 | 2.99.2 | 2.99.3 | 2.99.4 | 2.99.5 | 3.0.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.1 | 3.1.1 | 3.1.2 | 3.1.3 | 3.1.4 | 3.1.5 | 3.1.90 | 3.1.91 | 3.1.92 | 3.2.0 | 3.2.1 | 3.2.2 | 3.3.1 | 3.3.3 | 3.3.92 | 3.4.0 | 3.4.1 | 3.4.2 | 3.5.2 | 3.5.90 | 3.5.92 | 3.6.0 | 3.6.1 | 3.6.2
Debian1 product
  • vino< 3.10.1-1

5 vendors · 7 products

References

18 links
Show all 18 references