CVE-2008-5714
CVE-2008-5714
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.
EPSS 2.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.gnu.org/archive/html/qemu-devel/2008-12/msg00498.html
- http://secunia.com/advisories/35062
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47683
- http://lists.gnu.org/archive/html/qemu-devel/2008-11/msg01224.html
- http://secunia.com/advisories/34642
- http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5966
- http://www.securityfocus.com/bid/33020
- http://www.ubuntu.com/usn/usn-776-1
- http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
- http://secunia.com/advisories/33568
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
- http://svn.savannah.gnu.org/viewvc/trunk/monitor.c?root=qemu&r1=5966&r2=5965&pathrev=5966
- https://nvd.nist.gov/vuln/detail/CVE-2008-5714