CVE-2008-2382
Fixed in a distro release EPSS 7%
The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.
Products: qemu, kvm_qumranet kvm
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | 0.9.1-9 |
| Debian 13 | qemu | 0.9.1-9 |
| Debian 14 | qemu | 0.9.1-9 |
| openSUSE Tumbleweed | qemu | 2.6.1-1.5 |
| openSUSE Tumbleweed | qemu-linux-user | 2.6.1-1.5 |