CVE-2023-3255

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the inflate_buffer function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.

The qemu-kvm versions as shipped with Red Hat Enterprise Linux 6, 7, and RHEL Advanced Virtualization are not affected by this flaw as they did not include VNC clipboard support (upstream commit 0bf41cab).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.