CVE-2013-5745 Denial of service in n/a

High 7.1 Published 1 Oct 2013 Updated 6 Aug 2024

Remote attackers can cause a denial of service in GNOME Vino via crafted requests during authentication, leading to infinite loops and resource exhaustion.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2013-5745?

CVE-2013-5745 is a high-severity denial of service vulnerability in Canonical Ubuntu Linux, published on 1 Oct 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial of service (infinite loop, CPU and disk consumption) via multiple crafted requests during authentication.

Weakness: CWE-20

Which versions are affected by CVE-2013-5745?

It affects 2 products.

Linux distribution packages (10)

`vino` Red Hat:enterprise_linux:5::client	All versions	`0:2.13.5-10.el5_10`
`vino-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:2.13.5-10.el5_10`
`vino` Red Hat:enterprise_linux:5::server	All versions	`0:2.13.5-10.el5_10`
`vino-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:2.13.5-10.el5_10`
`vino` Red Hat:enterprise_linux:6::client	All versions	`0:2.28.1-9.el6_4`
`vino-debuginfo` Red Hat:enterprise_linux:6::client	All versions	`0:2.28.1-9.el6_4`
`vino` Red Hat:enterprise_linux:6::server	All versions	`0:2.28.1-9.el6_4`
`vino-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`0:2.28.1-9.el6_4`
`vino` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.28.1-9.el6_4`
`vino-debuginfo` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.28.1-9.el6_4`

Products include Canonical Ubuntu Linux, David King Vino.

How do I fix CVE-2013-5745?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2013-5745 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2013-5745 exists.

Public exploit code: 1 Exploit-DB entry.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2013-5745, GHSA-vjj5-vm4p-gf6m, MGASA-2013-0300, RHSA-2013:1452.