Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Sep 24, 2015 |
| Freebsd | — | Upgrade qemu-user-staticUpgrade qemu-develUpgrade qemu-sbrunoUpgrade qemu | Dec 10, 2025 | Jan 2, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Jun 17, 2020 | Jan 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Jan 23, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2020 |
| Suse | — | Upgrade xen-kmp-traceUpgrade qemu-seabiosUpgrade xen-kmp-defaultUpgrade xen-doc-pdfUpgrade qemu-block-curlUpgrade xen-doc-htmlUpgrade qemu-s390Upgrade xen-kmp-paeUpgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade xen-libsUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-langUpgrade qemu-block-rbdUpgrade kvmUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ipxeUpgrade qemu-sgabiosUpgrade xen-toolsUpgrade qemuUpgrade qemu-ppcUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade xenUpgrade qemu-toolsUpgrade xen-devel | Dec 18, 2015 | Sep 24, 2015 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-misc | Nov 8, 2024 | Jan 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub