← back
CVE-2015-1779

CVE-2015-1779

EPSS 7.4%
The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-April/155196.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-05/msg00033.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1931.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1943.htmlhttps://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04894.htmlhttps://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04895.htmlhttps://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04896.htmlhttps://security.gentoo.org/glsa/201602-01http://www.debian.org/security/2015/dsa-3259http://www.openwall.com/lists/oss-security/2015/03/24/9