CVE-2016-5008

CVE-2016-5008 affects libvirt prior to 2.0.0, where setting the VNC password to an empty string fails to disable authentication, allowing an unauthenticated remote attacker to establish a VNC session. The root cause is improper disabling of password checking for VNC when the password is empty. Do...