Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.1 | 6.5 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| Primary | 2.0 | 3.5 | LOW | AV:N/AC:M/Au:S/C:N/I:N/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=4c65fed8bdf96780735dbdb92a8 | secalert@redhat.com | N/A |
| http://www.debian.org/security/2016/dsa-3469 | secalert@redhat.com | Third Party Advisory |
| http://www.debian.org/security/2016/dsa-3470 | secalert@redhat.com | Third Party Advisory |
| http://www.debian.org/security/2016/dsa-3471 | secalert@redhat.com | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2015/12/08/7 | secalert@redhat.com | Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/78708 | secalert@redhat.com | Third Party Advisory VDB Entry |
| https://bugzilla.redhat.com/show_bug.cgi?id=1289541 | secalert@redhat.com | Issue Tracking Patch Third Party Advisory |
| https://security.gentoo.org/glsa/201602-01 | secalert@redhat.com | Third Party Advisory |
| http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=4c65fed8bdf96780735dbdb92a8 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.debian.org/security/2016/dsa-3469 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.debian.org/security/2016/dsa-3470 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.debian.org/security/2016/dsa-3471 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2015/12/08/7 | af854a3a-2127-422b-91ae-364da2661108 | Mailing List Third Party Advisory |
| http://www.securityfocus.com/bid/78708 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| https://bugzilla.redhat.com/show_bug.cgi?id=1289541 | af854a3a-2127-422b-91ae-364da2661108 | Issue Tracking Patch Third Party Advisory |
| https://security.gentoo.org/glsa/201602-01 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |