Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p5xv-5g6h-qw33

Опубликовано: 13 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the inflate_buffer function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the inflate_buffer function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.

EPSS

Процентиль: 33%
0.00127
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 2 года назад

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.

CVSS3: 6.5
redhat
почти 2 года назад

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.

CVSS3: 6.5
nvd
почти 2 года назад

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.

CVSS3: 6.5
msrc
9 месяцев назад

Описание отсутствует

CVSS3: 6.5
debian
почти 2 года назад

A flaw was found in the QEMU built-in VNC server while processing Clie ...

EPSS

Процентиль: 33%
0.00127
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-835