CVE-2014-7815

Опубликовано: 14 нояб. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.

Ссылки

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e6908bfe8e07f2b452e78e677da1b45b1c0f6829
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0349.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0624.html
Third Party Advisory
http://secunia.com/advisories/61484
Third Party Advisory
http://secunia.com/advisories/62143
Third Party Advisory
http://secunia.com/advisories/62144
Third Party Advisory
http://support.citrix.com/article/CTX200892
Third Party Advisory
http://www.debian.org/security/2014/dsa-3066
Third Party Advisory
http://www.debian.org/security/2014/dsa-3067
Third Party Advisory
http://www.ubuntu.com/usn/USN-2409-1
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1157641
Issue Tracking
Third Party Advisory
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e6908bfe8e07f2b452e78e677da1b45b1c0f6829
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0349.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0624.html
Third Party Advisory
http://secunia.com/advisories/61484
Third Party Advisory
http://secunia.com/advisories/62143
Third Party Advisory
http://secunia.com/advisories/62144
Third Party Advisory
http://support.citrix.com/article/CTX200892
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.1.3 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03847

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2014-7815

ubuntu

почти 11 лет назад

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.

CVE-2014-7815

redhat

почти 11 лет назад

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.

CVE-2014-7815

debian

почти 11 лет назад

The set_pixel_format function in ui/vnc.c in QEMU allows remote attack ...

GHSA-5gvx-32vr-xx6v

github

больше 3 лет назад

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.

ELSA-2015-0349

oracle-oval

больше 10 лет назад

ELSA-2015-0349: qemu-kvm security, bug fix, and enhancement update (IMPORTANT)

EPSS

Процентиль: 88%

0.03847

Низкий

5 Medium

CVSS2

Дефекты

CWE-20