The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | Jan 12, 2016 |
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade libcacard-toolsUpgrade libcacardUpgrade qemu-kvmUpgrade libcacard-develUpgrade qemu-kvm-common | Dec 1, 2016 | Jan 12, 2016 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jan 12, 2016 |
| Freebsd | — | Upgrade qemuUpgrade qemu-develUpgrade qemu-sbruno | Dec 10, 2025 | Dec 4, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jan 12, 2016 |
| Oracle_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade libcacard-develUpgrade libcacard-toolsUpgrade qemu-kvmUpgrade libcacard | Oct 16, 2024 | Jan 12, 2016 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade xen-kmp-defaultUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-kvmUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade qemu-seabiosUpgrade qemu-audio-alsaUpgrade xen-kmp-paeUpgrade xen-libs-32bitUpgrade qemu-microvmUpgrade qemu-s390xUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade xenUpgrade qemu-ui-spice-appUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-armUpgrade qemu-sgabiosUpgrade qemuUpgrade xen-doc-htmlUpgrade kvmUpgrade qemu-ui-openglUpgrade qemu-block-rbdUpgrade xen-libsUpgrade qemu-ipxeUpgrade xen-develUpgrade qemu-toolsUpgrade qemu-audio-ossUpgrade qemu-audio-paUpgrade qemu-hw-display-qxlUpgrade xen-toolsUpgrade qemu-chardev-spiceUpgrade qemu-ppcUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade xen-tools-domUUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpuUpgrade xen-tools-xendomains-wait-disk | Jan 12, 2016 | May 13, 2015 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-armUpgrade qemu-system | Nov 8, 2024 | Jan 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub