Description
Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | vino | 3.8.1-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | vino | 2.28.1-8.el6_3 | RHSA-2013:0169 |
Advisories 1
- RHSA-2013:0169 Red Hat Security Advisory: vino security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2013:0169 vendor-advisory
- vino-clipboard-info-disclosure(78602) vdb-entry
- [oss-security] 20120913 Re: CVE request: information leak in vino mailing-list
- USN-1701-1 vendor-advisory
- 55548 vdb-entry
- [oss-security] 20120913 CVE request: information leak in vino mailing-list
- 50527 third-party-advisory