CVE-2015-1779

Description

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.

Risk Information

Base Score

8.6

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

EPSS Score

Exploitation Probability

5.573

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in QEMU 2.1.3	Windows
Multiple Vulnerabilities are affected in QEMU 2.3.0	Windows
Machine emulator and virtualizer (USN-2608-1) qemu-system_2.2+dfsg-5expubuntu9.7_i386.deb	Linux
Machine emulator and virtualizer (USN-2608-1) qemu-system_2.2+dfsg-5expubuntu9.7_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234