PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2017-15268

CVE-2017-15268

QEMU: I/O: potential memory exhaustion via websock connection to VNC

Loading…

Severity

Low

Red Hat Product Security

3

CVSS 3.0

Review impact separately from score.

Published · September 22, 2017

Updated · June 28, 2026

Description

A memory leakage issue was found in the I/O channels websockets implementation of the Quick Emulator (QEMU). It could occur while sending screen updates to a client, which is slow to read and process them further. A privileged guest user could use this flaw to cause a denial of service on the host and/or potentially crash the QEMU process instance on the host.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 3
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L

CVSS 2.0 · 2.1
AV:N/AC:H/Au:S/C:N/I:N/A:P

CWE-400 · Uncontrolled Resource Consumption