Published: 14/11/2014 Updated: 13/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The set_pixel_format function in ui/vnc.c in QEMU allows remote malicious users to cause a denial of service (crash) via a small bytes_per_pixel value.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qemu qemu
debian debian linux 7.0
redhat enterprise linux desktop 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux server 7.0
redhat enterprise linux server aus 7.3
redhat enterprise linux server aus 7.4
redhat enterprise linux eus 7.3
redhat enterprise linux eus 7.4
redhat enterprise linux eus 7.5
redhat enterprise linux server aus 7.6
redhat enterprise linux eus 7.6
redhat enterprise linux server aus 7.7
redhat enterprise linux eus 7.7
redhat virtualization 3.0
canonical ubuntu linux 14.10
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04
canonical ubuntu linux 10.04
suse linux enterprise server 12
suse linux enterprise desktop 12

Debian Bug report logs - #765496 CVE-2014-3689: insufficient parameter validation in vmware_vga rectangle functions Package: qemu-system-x86; Maintainer for qemu-system-x86 is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Source for qemu-system-x86 is src:qemu (PTS, buildd, popcon) Reported by: Michael Tokarev & ...

Several security issues were fixed in QEMU ...

Several vulnerabilities were discovered in qemu, a fast processor emulator CVE-2014-3689 The Advanced Threat Research team at Intel Security reported that guest provided parameter were insufficiently validated in rectangle functions in the vmware-vga driver A privileged guest user could use this flaw to write into qemu address sp ...

Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution on x86 hardware CVE-2014-3689 The Advanced Threat Research team at Intel Security reported that guest provided parameter were insufficiently validated in rectangle functions in the vmware-vga driver A privileged guest user could use this flaw to w ...

An uninitialized data structure use flaw was found in the way the set_pixel_format() function sanitized the value of bits_per_pixel An attacker able to access a guest's VNC console could use this flaw to crash the guest ...

CWE-20 http://www.debian.org/security/2014/dsa-3067 http://secunia.com/advisories/62143 http://secunia.com/advisories/61484 http://secunia.com/advisories/62144 https://bugzilla.redhat.com/show_bug.cgi?id=1157641 http://www.ubuntu.com/usn/USN-2409-1 http://www.debian.org/security/2014/dsa-3066 http://rhn.redhat.com/errata/RHSA-2015-0349.html http://rhn.redhat.com/errata/RHSA-2015-0624.html http://support.citrix.com/article/CTX200892 http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e6908bfe8e07f2b452e78e677da1b45b1c0f6829 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765496 https://usn.ubuntu.com/2409-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-7815

CVE-2014-7815

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect