Skip to content
OpenAdvisories
Unscored USN-4573-1 7 CVEs

vino vulnerabilities

Published Oct 7, 2020 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Nicolas Ruff discovered that Vino incorrectly handled large ClientCutText
messages. A remote attacker could use this issue to cause the server to
crash, resulting in a denial of service. (CVE-2014-6053)

It was discovered that Vino incorrectly handled certain packet lengths. A
remote attacker could possibly use this issue to obtain sensitive
information, cause a denial of service, or execute arbitrary code.
(CVE-2018-7225)

Pavel Cheremushkin discovered that an information disclosure vulnerability
existed in Vino when sending a ServerCutText message. An attacker could
possibly use this issue to expose sensitive information. (CVE-2019-15681)

It was discovered that Vino incorrectly handled region clipping. A remote
attacker could possibly use this issue to cause Vino to crash, resulting in
a denial of service. (CVE-2020-14397)

It was discovered that Vino incorrectly handled encodings. A remote
attacker could use this issue to cause Vino to crash, resulting in a denial
of service, or possibly execute arbitrary code. (CVE-2020-14402,
CVE-2020-14403, CVE-2020-14404)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS vino 3.8.1-0ubuntu9.3
Ubuntu · 18.04 LTS 18.04:LTS vino 3.22.0-3ubuntu1.1
Ubuntu · 20.04 LTS 20.04:LTS vino 3.22.0-5ubuntu2.1

Vulnerabilities 7

References

  • report
    https://ubuntu.com/security/CVE-2014-6053
  • report
    https://ubuntu.com/security/CVE-2018-7225
  • report
    https://ubuntu.com/security/CVE-2019-15681
  • report
    https://ubuntu.com/security/CVE-2020-14397
  • report
    https://ubuntu.com/security/CVE-2020-14402
  • report
    https://ubuntu.com/security/CVE-2020-14403
  • report
    https://ubuntu.com/security/CVE-2020-14404