CVE-2017-15124
- State
- Published
- Severity
- Not scored
- Published
- Jan 9, 2018
- Updated
- Aug 5, 2024
- Reserved
- Oct 8, 2017
Description
VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
QemuQEMU |
|
References
- 102295vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1525195
- DSA-4213vendor-advisory
- RHSA-2018:0816vendor-advisory
- RHSA-2018:1104vendor-advisory
- RHSA-2018:1113vendor-advisory
- USN-3575-1vendor-advisory
- RHSA-2018:3062vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.