6.5
Medium
CVE-2022-3165 An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended…
Description
An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QEMU | Versions not published |
References
- gitlab.com gitlab.com
- FEDORA-2022-8dcdfe7297 lists.fedoraproject.org
- FEDORA-2022-4387579e67 lists.fedoraproject.org
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of QEMU
The 60 CVEs of QEMU →
CVE-2023-2680
This CVE exists because of an incomplete fix for CVE-2021-3750
7.5
High
CVE-2023-3301
A flaw was found in QEMU
5.6
Medium
CVE-2023-3180
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in…
6.0
Medium
CVE-2023-1386
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU
3.3
Low