Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 9, 2016 | Feb 3, 2016 |
| Freebsd | — | Upgrade qemu-sbrunoUpgrade qemuUpgrade qemu-user-staticUpgrade qemu-devel | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Apr 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2015 |
| Suse | — | Upgrade qemu-langUpgrade qemu-block-curlUpgrade qemu-ui-spice-appUpgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ppcUpgrade qemu-s390Upgrade xen-kmp-traceUpgrade qemu-ksmUpgrade qemu-block-rbdUpgrade qemu-hw-usb-redirectUpgrade qemu-seabiosUpgrade qemu-microvmUpgrade qemu-kvmUpgrade qemu-skibootUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade qemu-ui-spice-coreUpgrade qemu-audio-alsaUpgrade qemu-block-sshUpgrade xen-toolsUpgrade xen-kmp-paeUpgrade qemu-audio-paUpgrade xenUpgrade qemu-chardev-baumUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-armUpgrade xen-kmp-defaultUpgrade kvmUpgrade qemu-toolsUpgrade qemu-s390xUpgrade xen-tools-domUUpgrade qemu-audio-ossUpgrade xen-libsUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-sgabiosUpgrade xen-doc-pdfUpgrade qemu-x86Upgrade qemu-ui-cursesUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade xen-develUpgrade qemuUpgrade xen-libs-32bitUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-spiceUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade xen-doc-html | Feb 3, 2016 | Feb 3, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-misc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub