CVE catalog

CVE-2011-1165

vino: CVE-2011-1165

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
2.27% · Oct 25, 2026

Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianvinobookworm3.22.0-6vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianvinosourcebookworm(unfixed)unimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [vino]Affected
    Details (2)
    • 3.22.0-6 · amd64 · bookworm

      Affected

      dsa · vino · debian · bookworm; dsa · vino · debian · 12

    • 3.22.0-6 · arm64 · bookworm

      Affected

      dsa · vino · debian · bookworm; dsa · vino · debian · 12

Observed:

References