The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 24, 2008 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-x86Upgrade qemu-skibootUpgrade qemu-microvmUpgrade qemu-block-nfsUpgrade qemu-imgUpgrade qemu-vgabiosUpgrade qemu-hw-usb-hostUpgrade qemu-block-curlUpgrade kvmUpgrade qemu-vmsr-helperUpgrade qemu-block-dmgUpgrade qemu-linux-userUpgrade qemu-hw-usb-smartcardUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-SLOFUpgrade qemu-hw-usb-redirectUpgrade qemu-docUpgrade qemu-kvmUpgrade qemu-audio-ossUpgrade qemu-audio-alsaUpgrade qemu-ppcUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-extraUpgrade qemu-block-iscsiUpgrade qemu-headlessUpgrade qemu-audio-dbusUpgrade qemu-pr-helperUpgrade qemu-vhost-user-gpuUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-ksmUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemu-s390Upgrade qemu-seabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ivshmem-toolsUpgrade qemu-s390xUpgrade qemu-armUpgrade qemu-audio-jackUpgrade qemu-langUpgrade qemu-ipxe | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade kvm | Nov 8, 2024 | Dec 24, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub