Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Sep 24, 2015 |
| Freebsd | — | Upgrade qemuUpgrade qemu-sbrunoUpgrade qemu-user-staticUpgrade qemu-devel | Dec 10, 2025 | Jan 2, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Jun 17, 2020 | Jan 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jan 23, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2020 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade xen-libsUpgrade qemu-s390Upgrade qemu-seabiosUpgrade xen-kmp-traceUpgrade xen-doc-pdfUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade xen-libs-32bitUpgrade xenUpgrade qemu-sgabiosUpgrade kvmUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-kvmUpgrade qemu-ipxeUpgrade qemu-ppcUpgrade xen-develUpgrade xen-toolsUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu | Dec 18, 2015 | Sep 24, 2015 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-kvm | Nov 8, 2024 | Jan 23, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub