The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 24, 2008 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-hw-usb-hostUpgrade qemu-docUpgrade qemu-audio-ossUpgrade qemu-imgUpgrade qemu-x86Upgrade kvmUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-usb-redirectUpgrade qemu-linux-userUpgrade qemuUpgrade qemu-vgabiosUpgrade qemu-block-curlUpgrade qemu-skibootUpgrade qemu-hw-usb-smartcardUpgrade qemu-vmsr-helperUpgrade qemu-block-nfsUpgrade qemu-microvmUpgrade qemu-block-dmgUpgrade qemu-SLOFUpgrade qemu-toolsUpgrade qemu-ivshmem-toolsUpgrade qemu-ppcUpgrade qemu-audio-jackUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-sshUpgrade qemu-armUpgrade qemu-audio-dbusUpgrade qemu-vhost-user-gpuUpgrade qemu-seabiosUpgrade qemu-extraUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-s390xUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-pr-helperUpgrade qemu-headless | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kvm | Nov 8, 2024 | Dec 24, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub