5

CVE-2014-7815

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qemu ≫ Qemu Version <= 2.1.3
Debian ≫ Debian Linux Version 7.0
Redhat ≫ Enterprise Linux Eus Version 7.3
Redhat ≫ Enterprise Linux Eus Version 7.4
Redhat ≫ Enterprise Linux Eus Version 7.5
Redhat ≫ Enterprise Linux Eus Version 7.6
Redhat ≫ Enterprise Linux Eus Version 7.7
Redhat ≫ Virtualization Version 3.0
   Redhat ≫ Enterprise Linux Version 7.0
Canonical ≫ Ubuntu Linux Version 10.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 14.10
Suse ≫ Linux Enterprise Desktop Version 12 Update -
Suse ≫ Linux Enterprise Server Version 12 Update -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.74% 0.884
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.ubuntu.com/usn/USN-2409-1
Third Party Advisory
http://support.citrix.com/article/CTX200892
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0349.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0624.html
Third Party Advisory
http://secunia.com/advisories/62143
Third Party Advisory
http://secunia.com/advisories/62144
Third Party Advisory
http://www.debian.org/security/2014/dsa-3066
Third Party Advisory
http://www.debian.org/security/2014/dsa-3067
Third Party Advisory
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e6908bfe8e07f2b452e78e677da1b45b1c0f6829
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/61484
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1157641
Third Party Advisory
Issue Tracking