p PatchFirst

CVE-2023-3354

CVE-2023-3354 · Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

CVSS 7.5 · Alta · EPSS 1,6% · Corrección disponible

Publicación
Actualización

Pila tecnológica: system

Productos y versiones afectados

  • qemu

    Sin corrección publicada

  • red hat enterprise linux 6

    Sin corrección publicada

  • red hat enterprise linux 7

    Sin corrección publicada

  • red hat enterprise linux 7

    Sin corrección publicada

  • red hat enterprise linux 8

    Sin corrección publicada

  • red hat enterprise linux 8 advanced virtualization

    Sin corrección publicada

  • red hat enterprise linux 9

    Sin corrección publicada

  • red hat openstack platform 13 (queens)

    Sin corrección publicada

  • fedora

    Sin corrección publicada

  • extra packages for enterprise linux

    Sin corrección publicada

  • qemu Debian:12

    Versiones
    • 1:7.2+dfsg-7
    • 1:7.2+dfsg-7+deb12u1
    • 1:7.2+dfsg-7+deb12u2~bpo11+1
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:7.2+dfsg-7+deb12u2

    Actualiza a 1:7.2+dfsg-7+deb12u2

  • qemu Debian:13

    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:8.0.4+dfsg-1

    Actualiza a 1:8.0.4+dfsg-1

  • qemu Debian:14

    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:8.0.4+dfsg-1

    Actualiza a 1:8.0.4+dfsg-1

  • qemu Ubuntu:Pro:18.04:LTS

    Versiones
    • 1:2.10+dfsg-0ubuntu3
    • 1:2.10+dfsg-0ubuntu4
    • 1:2.10+dfsg-0ubuntu5
    • 1:2.11+dfsg-1ubuntu1
    • 1:2.11+dfsg-1ubuntu2
    • 1:2.11+dfsg-1ubuntu4
    • 1:2.11+dfsg-1ubuntu5
    • 1:2.11+dfsg-1ubuntu6
    • 1:2.11+dfsg-1ubuntu7
    • 1:2.11+dfsg-1ubuntu7.1
    • 1:2.11+dfsg-1ubuntu7.2
    • 1:2.11+dfsg-1ubuntu7.3
    • 1:2.11+dfsg-1ubuntu7.4
    • 1:2.11+dfsg-1ubuntu7.5
    • 1:2.11+dfsg-1ubuntu7.6
    • 1:2.11+dfsg-1ubuntu7.7
    • 1:2.11+dfsg-1ubuntu7.8
    • 1:2.11+dfsg-1ubuntu7.9
    • 1:2.11+dfsg-1ubuntu7.10
    • 1:2.11+dfsg-1ubuntu7.12
    • 1:2.11+dfsg-1ubuntu7.13
    • 1:2.11+dfsg-1ubuntu7.14
    • 1:2.11+dfsg-1ubuntu7.15
    • 1:2.11+dfsg-1ubuntu7.17
    • 1:2.11+dfsg-1ubuntu7.18
    • 1:2.11+dfsg-1ubuntu7.19
    • 1:2.11+dfsg-1ubuntu7.20
    • 1:2.11+dfsg-1ubuntu7.21
    • 1:2.11+dfsg-1ubuntu7.22
    • 1:2.11+dfsg-1ubuntu7.23
    • 1:2.11+dfsg-1ubuntu7.25
    • 1:2.11+dfsg-1ubuntu7.26
    • 1:2.11+dfsg-1ubuntu7.27
    • 1:2.11+dfsg-1ubuntu7.28
    • 1:2.11+dfsg-1ubuntu7.29
    • 1:2.11+dfsg-1ubuntu7.31
    • 1:2.11+dfsg-1ubuntu7.32
    • 1:2.11+dfsg-1ubuntu7.33
    • 1:2.11+dfsg-1ubuntu7.34
    • 1:2.11+dfsg-1ubuntu7.35
    • 1:2.11+dfsg-1ubuntu7.36
    • 1:2.11+dfsg-1ubuntu7.37
    • 1:2.11+dfsg-1ubuntu7.38
    • 1:2.11+dfsg-1ubuntu7.39
    • 1:2.11+dfsg-1ubuntu7.40
    • 1:2.11+dfsg-1ubuntu7.41
    • 1:2.11+dfsg-1ubuntu7.42
    • 1:2.11+dfsg-1ubuntu7.42+esm1
    • 1:2.11+dfsg-1ubuntu7.42+esm2
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:2.11+dfsg-1ubuntu7.42+esm5

    Actualiza a 1:2.11+dfsg-1ubuntu7.42+esm5

  • qemu Ubuntu:20.04:LTS

    Versiones
    • 1:4.0+dfsg-0ubuntu9
    • 1:4.0+dfsg-0ubuntu10
    • 1:4.2-1ubuntu1
    • 1:4.2-1ubuntu2
    • 1:4.2-3ubuntu1
    • 1:4.2-3ubuntu2
    • 1:4.2-3ubuntu3
    • 1:4.2-3ubuntu4
    • 1:4.2-3ubuntu5
    • 1:4.2-3ubuntu6
    • 1:4.2-3ubuntu6.1
    • 1:4.2-3ubuntu6.2
    • 1:4.2-3ubuntu6.3
    • 1:4.2-3ubuntu6.4
    • 1:4.2-3ubuntu6.5
    • 1:4.2-3ubuntu6.6
    • 1:4.2-3ubuntu6.7
    • 1:4.2-3ubuntu6.8
    • 1:4.2-3ubuntu6.9
    • 1:4.2-3ubuntu6.10
    • 1:4.2-3ubuntu6.11
    • 1:4.2-3ubuntu6.12
    • 1:4.2-3ubuntu6.14
    • 1:4.2-3ubuntu6.15
    • 1:4.2-3ubuntu6.16
    • 1:4.2-3ubuntu6.17
    • 1:4.2-3ubuntu6.18
    • 1:4.2-3ubuntu6.19
    • 1:4.2-3ubuntu6.21
    • 1:4.2-3ubuntu6.23
    • 1:4.2-3ubuntu6.24
    • 1:4.2-3ubuntu6.25
    • 1:4.2-3ubuntu6.26
    • 1:4.2-3ubuntu6.27
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:4.2-3ubuntu6.28

    Actualiza a 1:4.2-3ubuntu6.28

  • qemu Ubuntu:22.04:LTS

    Versiones
    • 1:6.0+dfsg-2expubuntu1
    • 1:6.0+dfsg-2expubuntu2
    • 1:6.0+dfsg-2expubuntu4
    • 1:6.2+dfsg-2ubuntu5
    • 1:6.2+dfsg-2ubuntu6
    • 1:6.2+dfsg-2ubuntu6.1
    • 1:6.2+dfsg-2ubuntu6.2
    • 1:6.2+dfsg-2ubuntu6.3
    • 1:6.2+dfsg-2ubuntu6.4
    • 1:6.2+dfsg-2ubuntu6.5
    • 1:6.2+dfsg-2ubuntu6.6
    • 1:6.2+dfsg-2ubuntu6.7
    • 1:6.2+dfsg-2ubuntu6.8
    • 1:6.2+dfsg-2ubuntu6.9
    • 1:6.2+dfsg-2ubuntu6.10
    • 1:6.2+dfsg-2ubuntu6.11
    • 1:6.2+dfsg-2ubuntu6.12
    • 1:6.2+dfsg-2ubuntu6.13
    • 1:6.2+dfsg-2ubuntu6.14
    • 1:6.2+dfsg-2ubuntu6.15
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:6.2+dfsg-2ubuntu6.16

    Actualiza a 1:6.2+dfsg-2ubuntu6.16

Fuentes originales

Comprueba tu servidor →