7 matches found
PT-2026-56669
Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description An issue exists in the hardware emulator involving an incorrect buffer size calculation. This can lead to out-of-bounds writes within the 'ui/vnc' component, potentially allowing an attacker to...
PT-2026-56670
Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A hardware emulator issue involves an out-of-bounds read in the data buffer. This occurs when updating VNC update frequency statistics within the 'ui/vnc' component. A remote attacker could...
CVE-2019-20382
QEMU 4.1.0 has a memory leak in zrlecompressdata in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd...
CVE-2019-20382: Missing Release of Memory after Effective Lifetime
QEMU 4.1.0 has a memory leak in zrlecompressdata in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd...
Fedora 21 : xen-4.4.3-4.fc21 (2015-015aec3bf2)
ui/vnc: limit clientcuttext msg payload size CVE-2015-5239 1259504, e1000: Avoid infinite loop in processing transmit descriptor CVE-2015-6815 1260224, net: add checks to validate ring buffer pointers CVE-2015-5279 1263278, net: avoid infinite loop when receiving packets CVE-2015-5278 1263281, qe...
Fedora 23 : xen-4.5.1-9.fc23 (2015-28cfce6702)
ui/vnc: limit clientcuttext msg payload size CVE-2015-5239 1259504, e1000: Avoid infinite loop in processing transmit descriptor CVE-2015-6815 1260224, net: add checks to validate ring buffer pointers CVE-2015-5279 1263278, net: avoid infinite loop when receiving packets CVE-2015-5278 1263281, qe...
