SUSE-SU-2015:2088-2: LibVNCServer&distro=SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2015:2088-2 is a vulnerability in LibVNCServer&distro=SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 30-12-2015PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for LibVNCServer The LibVNCServer package was updated to fix the following security issues: - bsc#897031: fix several security issues: * CVE-2014-6051: Integer overflow in MallocFrameBuffer() on client side. * CVE-2014-6052: Lack of malloc() return value checking on client side. * CVE-2014-6053: Server crash on a very large ClientCutText message. * CVE-2014-6054: Server crash when scaling factor is set to zero. * CVE-2014-6055: Multiple stack overflows in File Transfer feature. - bsc#854151: Restrict the SSL cipher suite.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- LibVNCServer&distro=SUSE Linux Enterprise Server 12 SP1< 0.9.9-16.1
- LibVNCServer&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 0.9.9-16.1
- LibVNCServer&distro=SUSE Linux Enterprise Software Development Kit 12 SP1< 0.9.9-16.1
1 vendor · 3 products
References
8 links- bugzilla.suse.com/854151REPORT
- bugzilla.suse.com/897031REPORT