Denial Of Service (DoS)

2019-01-1509:07:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

39.6%

JSON

qemu-kvm-rhev is vulnerable to denial of service (DoS) attacks. The vulnerability exists through buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of service (heap memory corruption and process crash) or possibly execute arbitrary code on the host via unspecified vectors, related to refreshing the server display surface.

CPENameOperatorVersion
qemu-kvm-rheveq1.5.3__60.el7ev_0.2
qemu-kvm-rheveq1.5.3__60.el7_0.7
qemu-kvm-rheveq1.5.3__60.el7_0.10
qemu-kvm-rheveq1.5.3__60.el7_0.11
qemu-kvm-rheveq1.5.3__60.el7ev_0.2
qemu-kvm-rheveq1.5.3__60.el7_0.7
qemu-kvm-rheveq1.5.3__60.el7_0.10
qemu-kvm-rheveq1.5.3__60.el7_0.11

Name	Operator	Version
qemu-kvm-rhev	eq	1.5.3__60.el7ev_0.2
qemu-kvm-rhev	eq	1.5.3__60.el7_0.7
qemu-kvm-rhev	eq	1.5.3__60.el7_0.10
qemu-kvm-rhev	eq	1.5.3__60.el7_0.11
qemu-kvm-rhev	eq	1.5.3__60.el7ev_0.2
qemu-kvm-rhev	eq	1.5.3__60.el7_0.7
qemu-kvm-rhev	eq	1.5.3__60.el7_0.10
qemu-kvm-rhev	eq	1.5.3__60.el7_0.11