The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | Jan 12, 2016 |
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade libcacard-develUpgrade libcacard-toolsUpgrade libcacardUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 1, 2016 | Jan 12, 2016 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jan 12, 2016 |
| Freebsd | — | Upgrade qemu-sbrunoUpgrade qemu-develUpgrade qemu | Dec 10, 2025 | Dec 4, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jan 12, 2016 |
| Oracle_linux | — | Upgrade libcacard-develUpgrade libcacard-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade libcacardUpgrade qemu-kvm | Oct 16, 2024 | Jan 12, 2016 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade xen-libs-32bitUpgrade qemu-s390xUpgrade qemu-s390Upgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-audio-alsaUpgrade xen-kmp-paeUpgrade qemu-hw-usb-redirectUpgrade xenUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-microvmUpgrade qemu-block-sshUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade qemu-langUpgrade xen-kmp-defaultUpgrade qemu-vgabiosUpgrade qemu-block-curlUpgrade qemu-audio-spiceUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-appUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade xen-tools-xendomains-wait-diskUpgrade kvmUpgrade qemu-ui-openglUpgrade xen-doc-htmlUpgrade xen-tools-domuUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade xen-develUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-sgabiosUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade qemu-audio-paUpgrade xen-libsUpgrade qemu-hw-display-qxlUpgrade xen-toolsUpgrade qemu-audio-ossUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu | Jan 12, 2016 | May 13, 2015 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-kvm | Nov 8, 2024 | Jan 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub