CVE-2011-0905
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2...
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
Exploit likelihood
What each source reports
NVD Score used
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
- Record
CVE-2011-0905- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
- Record
CVE-2011-0905- Updated
- 2026-11-02
EUVDEUVD-2011-0917 No score
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
- Record
EUVD-2011-0917- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fx9f-m844-h4j5 No score
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2...
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
- Record
GHSA-fx9f-m844-h4j5- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
- Record
CVE-2011-0905- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-0905 No score
The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when tight encoding is used, allows remote authenticated users to cause a denial of service (daemon crash) via crafted dimensions in a framebuffer update request that triggers an out-of-bounds read operation.
- Record
DEBIAN-CVE-2011-0905- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10047-1 No score
vino-3.22.0-1.1 on GA media
These are all security issues fixed in the vino-3.22.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10047-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
vinoDebian:12 |
before 2.28.2-3 | 2.28.2-3 |
vinoDebian:6.0 |
before 2.28.2-2+squeeze1, plus listed versions 2.28.2-2 |
2.28.2-2+squeeze1 |
vinoRed Hat:enterprise_linux:6::client |
before 0:2.28.1-8.el6_3 | 0:2.28.1-8.el6_3 |
vino-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.28.1-8.el6_3 | 0:2.28.1-8.el6_3 |
vinoRed Hat:enterprise_linux:6::server |
before 0:2.28.1-8.el6_3 | 0:2.28.1-8.el6_3 |
vino-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.28.1-8.el6_3 | 0:2.28.1-8.el6_3 |
vinoRed Hat:enterprise_linux:6::workstation |
before 0:2.28.1-8.el6_3 | 0:2.28.1-8.el6_3 |
vino-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.28.1-8.el6_3 | 0:2.28.1-8.el6_3 |
vinoopenSUSE:Tumbleweed |
before 3.22.0-1.1 | 3.22.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-0905 is a low vulnerability (CVSS 3.5) in David King Vino, published May 10, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.50%, the 74th percentile. Fixed in vino 2.28.2-3.
References
git.gnome.org/browse/vino/commit?id=0c2c9175963fc56bf2af10e42867181332f96ce0
ubuntu.com/usn/usn-1128-1
lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
mandriva.com/security/advisories?name=MDVSA-2011:087
rhn.redhat.com/errata/RHSA-2013-0169.html
Show 44 moreShow less
bugzilla.gnome.org/show_bug.cgi?id=641803
secunia.com/advisories/44410
ftp.gnome.org/pub/GNOME/sources/vino/2.32/vino-2.32.2.news
vupen.com/english/advisories/2011/1144
exchange.xforce.ibmcloud.com/vulnerabilities/67244
securityfocus.com/bid/47681
bugzilla.redhat.com/show_bug.cgi?id=694456
debian.org/security/2011/dsa-2238
nvd.nist.gov/vuln/detail/CVE-2011-0905
github.com/advisories/GHSA-fx9f-m844-h4j5
security-tracker.debian.org/tracker/CVE-2011-0905
access.redhat.com/errata/RHSA-2013:0169
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0169.json
cve.org/CVERecord?id=CVE-2011-0904
suse.com/security/cve/CVE-2011-0904