NetSight
medium5.0

CVE-2014-7815

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.

Impact

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.

Affected products

VendorProductAffected versions
QemuQemu
through 2.1.3
DebianDebian Linux
Version 7.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Workstation
Version 7.0
RedhatVirtualization
Version 3.0
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04, 14.10
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Server
Version 12

Weakness classification

References