All errata/sisyphus/ALT-PU-2015-1412-1
ALT-PU-2015-1412-1

Package update qemu in branch sisyphus

Version2.3.0-alt1
Task#143859
Published2015-04-29
Max severityHIGH
Severity:

Closed issues (2)

CVE-2015-1779
HIGH8.6

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.

Published: 2016-01-12Modified: 2025-04-12
CVSS 2.0HIGH 7.8
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS 3.xHIGH 8.6
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
References