The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | Jan 12, 2016 |
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade libcacard-toolsUpgrade libcacard-develUpgrade qemu-kvm-commonUpgrade libcacardUpgrade qemu-kvm | Dec 1, 2016 | Jan 12, 2016 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jan 12, 2016 |
| Freebsd | — | Upgrade qemu-sbrunoUpgrade qemu-develUpgrade qemu | Dec 10, 2025 | Dec 4, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jan 12, 2016 |
| Oracle_linux | — | Upgrade libcacardUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade libcacard-toolsUpgrade libcacard-devel | Oct 16, 2024 | Jan 12, 2016 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade xenUpgrade qemu-s390Upgrade qemu-langUpgrade qemu-audio-alsaUpgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade xen-kmp-defaultUpgrade xen-libs-32bitUpgrade qemu-ksmUpgrade qemu-microvmUpgrade qemu-block-iscsiUpgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade qemu-ui-gtkUpgrade qemu-s390xUpgrade xen-tools-xendomains-wait-diskUpgrade qemuUpgrade qemu-guest-agentUpgrade qemu-x86Upgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-doc-htmlUpgrade qemu-ipxeUpgrade kvmUpgrade xen-tools-domuUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade xen-develUpgrade qemu-sgabiosUpgrade qemu-block-rbdUpgrade qemu-audio-ossUpgrade xen-toolsUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade qemu-audio-paUpgrade xen-libsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpu | Jan 12, 2016 | May 13, 2015 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system | Nov 8, 2024 | Jan 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub