CVE-2008-5714

EPSS 0.75%
Published 24.12.2008 18:29:15
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.

Affected products Warnungen 0 Metrics 2 CWE 0 References 15

Data is provided by the National Vulnerability Database (NVD)

Qemu ≫ Qemu Version0.9.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.75%	0.707

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:C/I:N/A:N

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html

http://secunia.com/advisories/33568

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html

http://secunia.com/advisories/34642

http://secunia.com/advisories/35062

http://www.ubuntu.com/usn/usn-776-1

http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html

http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html

http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5966

http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu&r1=5966&r2=5965&pathrev=5966

http://www.securityfocus.com/bid/33020

https://exchange.xforce.ibmcloud.com/vulnerabilities/47683

https://nvd.nist.gov/vuln/detail/CVE-2008-5714

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5714

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5714

EUVD