Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-2382
HistoryDec 24, 2008 - 12:00 a.m.

CVE-2008-2382

2008-12-2400:00:00
ubuntu.com
ubuntu.com
9

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.085 Low

EPSS

Percentile

94.3%

The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu
0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to
cause a denial of service (infinite loop) via a certain message.

Notes

Author Note
jdstrand vulnerable code not in xen
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchkvm< 1:62+dfsg-0ubuntu8.1UNKNOWN
ubuntu8.10noarchkvm< 1:72+dfsg-1ubuntu6.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.085 Low

EPSS

Percentile

94.3%