Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Sep 24, 2015 |
| Freebsd | — | Upgrade qemu-sbrunoUpgrade qemu-develUpgrade qemuUpgrade qemu-user-static | Dec 10, 2025 | Jan 2, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Jun 17, 2020 | Jan 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jan 23, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2020 |
| Suse | — | Upgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-x86Upgrade xenUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-ipxeUpgrade xen-toolsUpgrade qemu-kvmUpgrade xen-develUpgrade qemuUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade xen-tools-xendomains-wait-diskUpgrade kvmUpgrade qemu-seabiosUpgrade qemu-s390Upgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade xen-tools-domUUpgrade xen-kmp-traceUpgrade xen-doc-pdfUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade qemu-block-curlUpgrade xen-libs | Dec 18, 2015 | Sep 24, 2015 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-x86 | Nov 8, 2024 | Jan 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub