Bug 538018

Summary:	net-misc/tigervnc - xvnc -localhost: listens on all interfaces
Product:	Gentoo Linux	Reporter:	David K. Thompson <david>
Component:	Current packages	Assignee:	Raúl Porcel (RETIRED) <armin76>
Status:	RESOLVED UPSTREAM
Severity:	normal	CC:	david
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description David K. Thompson 2015-01-27 23:40:13 UTC

-localhost is supposed to only bind the local interface only.

It appears that when testing the availability of the display number the function "displayNumFree" creates an unreferenced TcpListener on 6000+n where n is the available display number being tested. The port is open on all interfaces. No connections are accepted on the port.

Maybe this could check for -localhost and/or just bind local interface in all cases?

Comment 1 David K. Thompson 2015-01-27 23:56:53 UTC

On further reading, this appears to happen in unix/xserver/hw/vnc/xvnc.cc line 355 in displayNumFree()

Comment 2 Raúl Porcel (RETIRED) gentoo-dev

2015-02-02 13:19:50 UTC

Please report this upstream.

Comment 3 David K. Thompson 2015-02-06 20:48:20 UTC

https://github.com/TigerVNC/tigervnc/issues/115

Thanks.