NetSight
IP …
high8.6

CVE-2015-1779

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or …

Impact

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.

Affected products

VendorProductAffected versions
QemuQemu
through 2.2.1
Version 2.3.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 14.10, 15.04
DebianDebian Linux
Versions 7.0, 8.0
FedoraprojectFedora
Versions 21, 22
RedhatEnterprise Linux Eus
Versions 7.1, 7.2, 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 7.3, 7.6, 7.7
RedhatEnterprise Linux Workstation
Version 7.0
RedhatVirtualization
Version 3.0
OracleLinux
Version 7

Weakness classification

CWE-400

References