CVE-2015-1779

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.

References

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155196.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00033.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html

http://rhn.redhat.com/errata/RHSA-2015-1931.html

http://rhn.redhat.com/errata/RHSA-2015-1943.html

http://www.debian.org/security/2015/dsa-3259

http://www.openwall.com/lists/oss-security/2015/03/24/9

http://www.openwall.com/lists/oss-security/2015/04/09/6

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

http://www.securityfocus.com/bid/73303

http://www.securitytracker.com/id/1033975

http://www.ubuntu.com/usn/USN-2608-1

https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04894.html

https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04895.html

https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04896.html

https://security.gentoo.org/glsa/201602-01

Details

Source: MITRE

Published: 2016-01-12

Updated: 2020-09-09

Type: CWE-400

Risk Information

CVSS v2

Base Score: 7.8

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 10

Severity: HIGH

CVSS v3

Base Score: 8.6

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Impact Score: 4

Exploitability Score: 3.9

Severity: HIGH

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* versions up to 2.2.1 (inclusive)

cpe:2.3:a:qemu:qemu:2.3.0:rc0:*:*:*:*:*:*

cpe:2.3:a:qemu:qemu:2.3.0:rc1:*:*:*:*:*:*

Configuration 2

OR

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

Configuration 3

OR

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration 4

OR

cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*

Configuration 5

OR

cpe:2.3:o:redhat:enterprise_linux_dekstop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.1:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration 6

AND

OR

cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*

OR

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Configuration 7

OR

cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*

Tenable Plugins

View all (19 total)

IDNameProductFamilySeverity
150537SUSE SLES11 Security Update : kvm (SUSE-SU-2021:14704-1)NessusSuSE Local Security Checks
high
117309RHEL 7 : qemu-kvm-rhev (RHSA-2015:1931)NessusRed Hat Local Security Checks
high
95512FreeBSD : qemu -- denial of service vulnerability (a228c7a0-ba66-11e6-b1cf-14dae9d210b8)NessusFreeBSD Local Security Checks
high
91249SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:1318-1)NessusSuSE Local Security Checks
critical
90478openSUSE Security Update : xen (openSUSE-2016-439)NessusSuSE Local Security Checks
critical
90396SUSE SLED11 / SLES11 Security Update : xen (SUSE-SU-2016:0955-1)NessusSuSE Local Security Checks
critical
90260openSUSE Security Update : xen (openSUSE-2016-413)NessusSuSE Local Security Checks
critical
90186SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:0873-1)NessusSuSE Local Security Checks
critical
88587GLSA-201602-01 : QEMU: Multiple vulnerabilities (Venom)NessusGentoo Local Security Checks
critical
86639CentOS 7 : qemu-kvm (CESA-2015:1943)NessusCentOS Local Security Checks
high
86626Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20151027)NessusScientific Linux Local Security Checks
high
86625RHEL 7 : qemu-kvm (RHSA-2015:1943)NessusRed Hat Local Security Checks
high
86624Oracle Linux 7 : qemu-kvm (ELSA-2015-1943)NessusOracle Linux Local Security Checks
high
83462SuSE 11.3 Security Update : kvm (SAT Patch Number 10645)NessusSuSE Local Security Checks
high
83435Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : qemu, qemu-kvm vulnerabilities (USN-2608-1) (Venom)NessusUbuntu Local Security Checks
high
83422Debian DSA-3259-1 : qemu - security update (Venom)NessusDebian Local Security Checks
high
83102Mandriva Linux Security Advisory : qemu (MDVSA-2015:210)NessusMandriva Local Security Checks
high
82963Fedora 22 : qemu-2.3.0-0.3.rc2.fc22 (2015-5541)NessusFedora Local Security Checks
high
82751Fedora 21 : qemu-2.1.3-5.fc21 (2015-5482)NessusFedora Local Security Checks
high