Unrated severityNVD Advisory· Published Jan 23, 2020· Updated Aug 6, 2024
CVE-2015-5239
CVE-2015-5239
Description
Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
28- osv-coords26 versionspkg:rpm/opensuse/xen&distro=openSUSE%20Tumbleweedpkg:rpm/suse/kvm&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSSpkg:rpm/suse/kvm&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/kvm&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/kvm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSSpkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1
< 4.7.0_12-1.3+ 25 more
- (no CPE)range: < 4.7.0_12-1.3
- (no CPE)range: < 1.4.2-46.1
- (no CPE)range: < 1.4.2-46.1
- (no CPE)range: < 1.4.2-44.1
- (no CPE)range: < 1.4.2-44.1
- (no CPE)range: < 2.0.2-48.19.1
- (no CPE)range: < 2.0.2-48.19.1
- (no CPE)range: < 2.0.2-48.19.1
- (no CPE)range: < 4.2.5_14-18.2
- (no CPE)range: < 4.4.3_02-26.2
- (no CPE)range: < 4.4.3_02-22.12.1
- (no CPE)range: < 4.5.2_02-4.1
- (no CPE)range: < 4.1.6_08-20.1
- (no CPE)range: < 4.2.5_14-18.2
- (no CPE)range: < 4.2.5_14-18.2
- (no CPE)range: < 4.4.3_02-26.2
- (no CPE)range: < 4.4.3_02-22.12.1
- (no CPE)range: < 4.5.2_02-4.1
- (no CPE)range: < 4.2.5_14-18.2
- (no CPE)range: < 4.4.3_02-26.2
- (no CPE)range: < 4.4.3_02-22.12.1
- (no CPE)range: < 4.5.2_02-4.1
- (no CPE)range: < 4.2.5_14-18.2
- (no CPE)range: < 4.4.3_02-26.2
- (no CPE)range: < 4.4.3_02-22.12.1
- (no CPE)range: < 4.5.2_02-4.1
Patches
Vulnerability mechanics
References
10- lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.htmlmitrex_refsource_MISC
- lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.htmlmitrex_refsource_MISC
- lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.htmlmitrex_refsource_MISC
- lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.htmlmitrex_refsource_MISC
- lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.htmlmitrex_refsource_MISC
- lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.htmlmitrex_refsource_MISC
- www.openwall.com/lists/oss-security/2015/09/02/7mitrex_refsource_MISC
- www.ubuntu.com/usn/USN-2745-1mitrex_refsource_MISC
- github.com/qemu/qemu/commit/f9a70e79391f6d7c2a912d785239ee8effc1922dmitrex_refsource_CONFIRM
- www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.