Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-1779
8.6
HIGHCVSS v3
Published
January 12, 2016
CVSS v2
7.8 HIGH
Affected
7 projects
Assigned by
Red Hat
Severity scale
010
Description
The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
qemu-project/qemuGitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org
GitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org= 2.3.0, <= 2.2.1NVD
qemu/qemu
GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.
GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.= 2.3.0, <= 2.2.1NVD
NPM
RubyGems