CVE-2015-1779

HIGH · 8.6 CVSS Gepubliceerd: 12-01-2016 CWE-400

Beschrijving NL

Met de VNC websocket frame decoder in QEMU kunnen externe aanvallers een denial of service (geheugen- en CPU-verbruik) veroorzaken via een grote (1) websocket-payload of (2) HTTP-headersectie.

Origineel (Engels) tonen

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.

Vendors

Qemu Canonical Debian Fedoraproject Redhat Oracle

Affected products

Qemu Ubuntu Linux Debian Linux Fedora Enterprise Linux Eus Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server Tus Enterprise Linux Workstation Virtualization Enterprise Linux Linux

References

lists.fedoraproject.org
lists.fedoraproject.org
lists.opensuse.org
lists.opensuse.org
rhn.redhat.com
rhn.redhat.com
www.debian.org
www.openwall.com
www.openwall.com
www.oracle.com
www.securityfocus.com
www.securitytracker.com
www.ubuntu.com
lists.gnu.org
lists.gnu.org
lists.gnu.org
security.gentoo.org