« List of all CVEs

CVE-2023-3255

Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service

Published: 9/13/2023 Last updated: 11/8/2025 Reserved: 6/14/2023

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 6.5 Medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Opam packages affected (2)

conf-qemu-img nbd-tool

Products affected (14)

Product Vendor Version
Red Hat Enterprise Linux 6 Red Hat Magic UI 4.0.0,Magic UI 3.1.1
Red Hat Enterprise Linux 7 Red Hat < 10.0.17763.3406
Red Hat Enterprise Linux 9 Red Hat 2016 (Core installation)
Red Hat Enterprise Linux 6 Red Hat >= 8.2.3
Red Hat Enterprise Linux 7 Red Hat 2008 for 32-bit Systems Service Pack 2
Red Hat Enterprise Linux 9 Red Hat < 1.1.16
Red Hat Enterprise Linux 7 Red Hat unspecified
Red Hat Enterprise Linux 7 Red Hat >= 8.2.4
Red Hat Enterprise Linux 8 Advanced Virtualization Red Hat 2008 for 32-bit Systems Service Pack 2 (Core installation)
Red Hat Enterprise Linux 8 Advanced Virtualization Red Hat unspecified
Red Hat Enterprise Linux 8 Red Hat < 1.25.1
Red Hat Enterprise Linux 8 Red Hat 2016
Red Hat Enterprise Linux 8 Red Hat 1.0.0-4.2.6
Red Hat Enterprise Linux 8 Red Hat >= 8.2.2

References (18)

Credits (2)