CVE-2014-7815: The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value

Unscored severity · published Nov 14, 2014

CVE-2014-7815

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value

–

CVSS

3.7%

EPSS

On KEV

Description

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.

Exploitation

Is it being used?

Exploit prediction (EPSS)3.7% · higher than 90% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Debian Linux · Debian

7.0 · source: NVD

Enterprise Linux Desktop · Redhat

7.0 · source: NVD

Enterprise Linux Eus · Redhat

7.3; 7.4; 7.5; 7.6; 7.7 · source: NVD

Enterprise Linux Server · Redhat

7.0 · source: NVD

Enterprise Linux Server Aus · Redhat

7.3; 7.4; 7.6; 7.7 · source: NVD

Enterprise Linux Workstation · Redhat

7.0 · source: NVD

Linux Enterprise Desktop · Suse

12 · source: NVD

Linux Enterprise Server · Suse

12 · source: NVD

Qemu · Qemu

through 2.1.3 · source: NVD

Ubuntu Linux · Canonical

10.04; 12.04; 14.04; 14.10 · source: NVD

Virtualization · Redhat

3.0 · source: NVD

Affected product

Ubuntu Linux

Canonical

All Ubuntu Linux CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2014-7815

CVE.org

https://www.cve.org/CVERecord?id=CVE-2014-7815

git.qemu.org

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e6908bfe8e07f2b452e78e677da1b45b1c0f6829

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0349.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0624.html

Third Party Advisory

http://secunia.com/advisories/61484

Third Party Advisory

http://secunia.com/advisories/62143