CVE-2011-0011
Fixed in a distro release EPSS 1%
qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions.
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | qemu-kvm | 0.12.5+dfsg-5+squeeze1 |
| Red Hat Enterprise Linux 6 | qemu-img | 2:0.12.1.2-2.113.el6_0.8 |
| Red Hat Enterprise Linux 6 | qemu-kvm | 2:0.12.1.2-2.113.el6_0.8 |
| Red Hat Enterprise Linux 6 | qemu-kvm-debuginfo | 2:0.12.1.2-2.113.el6_0.8 |
| Red Hat Enterprise Linux 6 | qemu-kvm-tools | 2:0.12.1.2-2.113.el6_0.8 |