Логотип exploitDog
bind:"CVE-2023-3354"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2023-3354"

Количество 18

Количество 18

ubuntu логотип

CVE-2023-3354

почти 2 года назад

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2023-3354

почти 2 года назад

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2023-3354

почти 2 года назад

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2023-3354

11 месяцев назад

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2023-3354

почти 2 года назад

A flaw was found in the QEMU built-in VNC server. When a client connec ...

CVSS3: 7.5
EPSS: Низкий
redos логотип

ROS-20230825-05

почти 2 года назад

Уязвимость qemu

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-vhf9-5f69-9hjm

почти 2 года назад

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

CVSS3: 7.5
EPSS: Низкий
oracle-oval логотип

ELSA-2023-5094

почти 2 года назад

ELSA-2023-5094: qemu-kvm security and bug fix update (IMPORTANT)

EPSS: Низкий
fstec логотип

BDU:2023-05003

почти 2 года назад

Уязвимость эмулятора аппаратного обеспечения QEMU, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
oracle-oval логотип

ELSA-2023-5264

почти 2 года назад

ELSA-2023-5264: virt:ol and virt-devel:rhel security and bug fix update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:0589-1

больше 1 года назад

Security update for qemu

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4662-1

больше 1 года назад

Security update for qemu

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:1395-1

около 1 года назад

Security update for qemu

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4056-1

больше 1 года назад

Security update for qemu

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3444-1

почти 2 года назад

Security update for qemu

EPSS: Низкий
oracle-oval логотип

ELSA-2023-12855

больше 1 года назад

ELSA-2023-12855: kvm_utils3 security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3800-1

больше 1 года назад

Security update for qemu

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3721-1

почти 2 года назад

Security update for qemu

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-3354

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

CVSS3: 7.5
0%
Низкий
почти 2 года назад
redhat логотип
CVE-2023-3354

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

CVSS3: 7.5
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2023-3354

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

CVSS3: 7.5
0%
Низкий
почти 2 года назад
msrc логотип
CVSS3: 7.5
0%
Низкий
11 месяцев назад
debian логотип
CVE-2023-3354

A flaw was found in the QEMU built-in VNC server. When a client connec ...

CVSS3: 7.5
0%
Низкий
почти 2 года назад
redos логотип
ROS-20230825-05

Уязвимость qemu

CVSS3: 7.5
0%
Низкий
почти 2 года назад
github логотип
GHSA-vhf9-5f69-9hjm

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

CVSS3: 7.5
0%
Низкий
почти 2 года назад
oracle-oval логотип
ELSA-2023-5094

ELSA-2023-5094: qemu-kvm security and bug fix update (IMPORTANT)

почти 2 года назад
fstec логотип
BDU:2023-05003

Уязвимость эмулятора аппаратного обеспечения QEMU, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
0%
Низкий
почти 2 года назад
oracle-oval логотип
ELSA-2023-5264

ELSA-2023-5264: virt:ol and virt-devel:rhel security and bug fix update (IMPORTANT)

почти 2 года назад
suse-cvrf логотип
SUSE-SU-2024:0589-1

Security update for qemu

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2023:4662-1

Security update for qemu

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2024:1395-1

Security update for qemu

около 1 года назад
suse-cvrf логотип
SUSE-SU-2023:4056-1

Security update for qemu

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2023:3444-1

Security update for qemu

почти 2 года назад
oracle-oval логотип
ELSA-2023-12855

ELSA-2023-12855: kvm_utils3 security update (IMPORTANT)

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2023:3800-1

Security update for qemu

больше 1 года назад
suse-cvrf логотип
SUSE-SU-2023:3721-1

Security update for qemu

почти 2 года назад

Уязвимостей на страницу