The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Sep 24, 2015 |
| Freebsd | — | Upgrade qemu-sbrunoUpgrade qemu-user-staticUpgrade qemu-develUpgrade qemu | Dec 10, 2025 | Jan 2, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Jun 17, 2020 | Jan 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Jan 23, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2020 |
| Suse | — | Upgrade xen-libsUpgrade xen-tools-domUUpgrade qemu-block-curlUpgrade xen-doc-htmlUpgrade qemu-s390Upgrade xen-kmp-traceUpgrade xen-kmp-defaultUpgrade xen-doc-pdfUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade xenUpgrade xen-toolsUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade kvmUpgrade qemu-langUpgrade qemuUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade xen-develUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-sgabiosUpgrade qemu-ppc | Dec 18, 2015 | Sep 24, 2015 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-arm | Nov 8, 2024 | Jan 23, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub