Non évaluée
VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not...
CVE-2017-15124
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2017-15124 qemu Corrigé dans: 1:2.12~rc3+dfsg-1
- Ubuntu UBUNTU-CVE-2017-15124 qemu
Description d'origine La description telle que publiée par la source (souvent en anglais).
VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host.
Références
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory debian.org
- report bugzilla.redhat.com
- web securityfocus.com
- web usn.ubuntu.com