← Back

CVE-2015-5239

nvd nist
Published: Jan 23, 2020Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.

Affected (22)

Products: Qemu: Qemu · Fedoraproject: Fedora · Canonical: Ubuntu Linux · +2 more
Show all products
Qemu: Qemu · Fedoraproject: Fedora · Canonical: Ubuntu Linux · Suse: Linux Enterprise Debuginfo, Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit · Arista: Eos
Qemu
1 product
Qemu
Fedoraproject
1 product
Fedora
Canonical
1 product
Ubuntu Linux
Suse
4 products
Linux Enterprise Debuginfo
Linux Enterprise Desktop
Linux Enterprise Server
Linux Enterprise Software Development Kit
Arista
1 product
Eos
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Qemu
Before 2.1.0
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 21
Fedora
Version 22
Fedora
Version 23
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 12.04
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 15.04
Configuration D
11 vulnerable
Vulnerable SoftwareAffected Versions
Suse
Linux Enterprise Debuginfo
Version 11 sp3
Linux Enterprise Debuginfo
Version 11 sp4
Suse
Linux Enterprise Desktop
Version 11 sp3
Linux Enterprise Desktop
Version 11 sp4
Linux Enterprise Desktop
Version 12
Suse
Linux Enterprise Server
Version 11 sp3
Linux Enterprise Server
Version 11 sp4
Linux Enterprise Server
Version 12
Suse
Linux Enterprise Software Development Kit
Version 11 sp3
Linux Enterprise Software Development Kit
Version 11 sp4
Linux Enterprise Software Development Kit
Version 12
Configuration E
4 vulnerable
Vulnerable SoftwareAffected Versions
Arista
Eos
Version 4.12
Eos
Version 4.13
Eos
Version 4.14
Eos
Version 4.15

Related CWEs

CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (20)

Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Mailing ListPatchThird Party Advisory
Source: secalert@redhat.com
PatchThird Party Advisory
Source: secalert@redhat.com
PatchThird Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.