A flaw was found in the QEMU built-in...... CVE-2023-3255

- AV AC AU C I A
发布: 2023-09-13
修订: 2023-11-07

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.

0%
暂无可用Exp或PoC
当前有4条受影响产品信息