CVE-2014-6055: Debian Linux

Medium severity, CVSS 6.5. EPSS: 7.8% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.

Affected products

• Debian Debian Linux: version 7.0 only
• Fedoraproject Fedora: version 20 only; version 21 only
• Libvncserver Libvncserver: up to and including 0.9.9
• Red Hat Enterprise Linux Server Aus: version 6.5 only
• Red Hat Enterprise Linux Server Eus: version 6.5.z only

Published 2014-09-30. Last modified 2026-06-17.