CVEvulnerability
CVE-2008-2382
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-399
Description
The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.
Affected configurations
• qemu qemu (<= 0.9.1)
• qemu qemu 0.1.0
• qemu qemu 0.1.1
• qemu qemu 0.1.2
• qemu qemu 0.1.3
• qemu qemu 0.1.4
• qemu qemu 0.1.5
• qemu qemu 0.1.6
• qemu qemu 0.2.0
• qemu qemu 0.3.0
• qemu qemu 0.4.0
• qemu qemu 0.4.1
• qemu qemu 0.4.2
• qemu qemu 0.4.3
• qemu qemu 0.5.0
• qemu qemu 0.5.1
• qemu qemu 0.5.2
• qemu qemu 0.5.3
• qemu qemu 0.5.4
• qemu qemu 0.5.5
• qemu qemu 0.6.0
• qemu qemu 0.6.1
• qemu qemu 0.7.0
• qemu qemu 0.7.1
• qemu qemu 0.7.2
• qemu qemu 0.8.0
• qemu qemu 0.8.1
• qemu qemu 0.8.2
• qemu qemu 0.9.0
• kvm qumranet kvm (<= 79)
• kvm qumranet kvm 1
• kvm qumranet kvm 2
• kvm qumranet kvm 3
• kvm qumranet kvm 4
• kvm qumranet kvm 5
• kvm qumranet kvm 6
• kvm qumranet kvm 7
• kvm qumranet kvm 8
• kvm qumranet kvm 9
• kvm qumranet kvm 10
• kvm qumranet kvm 11
• kvm qumranet kvm 12
• kvm qumranet kvm 13
• kvm qumranet kvm 14
• kvm qumranet kvm 15
• kvm qumranet kvm 16
• kvm qumranet kvm 17
• kvm qumranet kvm 18
• kvm qumranet kvm 19
• kvm qumranet kvm 20
• kvm qumranet kvm 21
• kvm qumranet kvm 22
• kvm qumranet kvm 23
• kvm qumranet kvm 24
• kvm qumranet kvm 25
• kvm qumranet kvm 26
• kvm qumranet kvm 27
• kvm qumranet kvm 28
• kvm qumranet kvm 29
• kvm qumranet kvm 30
… and 48 more
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html lists.opensuse.org
- http://secunia.com/advisories/33293 Vendor Advisory
- http://secunia.com/advisories/33303 Vendor Advisory
- http://secunia.com/advisories/33350 secunia.com
- http://secunia.com/advisories/33568 secunia.com
- http://secunia.com/advisories/34642 secunia.com
- http://secunia.com/advisories/35062 secunia.com
- http://securityreason.com/securityalert/4803 securityreason.com
- http://securitytracker.com/id?1021488 securitytracker.com
- http://securitytracker.com/id?1021489 Exploit
- http://www.coresecurity.com/content/vnc-remote-dos www.coresecurity.com
- http://www.securityfocus.com/archive/1/499502/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32910 Exploit
- http://www.ubuntu.com/usn/usn-776-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2008/3488 www.vupen.com
- http://www.vupen.com/english/advisories/2008/3489 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47561 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01223.html www.redhat.com
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html lists.opensuse.org
- http://secunia.com/advisories/33293 Vendor Advisory
- http://secunia.com/advisories/33303 Vendor Advisory
- http://secunia.com/advisories/33350 secunia.com
- http://secunia.com/advisories/33568 secunia.com
- http://secunia.com/advisories/34642 secunia.com
- http://secunia.com/advisories/35062 secunia.com
- http://securityreason.com/securityalert/4803 securityreason.com
- http://securitytracker.com/id?1021488 securitytracker.com
- http://securitytracker.com/id?1021489 Exploit
- http://www.coresecurity.com/content/vnc-remote-dos www.coresecurity.com
- http://www.securityfocus.com/archive/1/499502/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32910 Exploit
- http://www.ubuntu.com/usn/usn-776-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2008/3488 www.vupen.com
- http://www.vupen.com/english/advisories/2008/3489 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47561 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01223.html www.redhat.com