CVE-2008-2382: Medium severity qemu vulnerability

Q: What is the severity of CVE-2008-2382?

CVE-2008-2382 is classified as a denial of service vulnerability due to the potential for an infinite loop caused by malformed messages.

Q: How do I fix CVE-2008-2382?

To fix CVE-2008-2382, upgrade to a version of QEMU later than 0.9.1 or KVM later than version 79.

Q: Which versions are affected by CVE-2008-2382?

CVE-2008-2382 affects QEMU versions up to 0.9.1 and KVM versions up to kvm-79.

Q: What types of attacks are possible with CVE-2008-2382?

An attacker can exploit CVE-2008-2382 to send specific messages that trigger an infinite loop, leading to denial of service.

Q: Is CVE-2008-2382 publicly known?

Yes, CVE-2008-2382 is a publicly disclosed vulnerability and details are available in security advisories.

Published Dec 24, 2008

Updated

The protocolclientmsg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.

Affected Software

108 affected components

Qemu Qemu<=0.9.1

Qemu Qemu=0.1.0

Qemu Qemu=0.1.1

Qemu Qemu=0.1.2

Qemu Qemu=0.1.3

Qemu Qemu=0.1.4

Qemu Qemu=0.1.5

Qemu Qemu=0.1.6

Qemu Qemu=0.2.0

Qemu Qemu=0.3.0

Qemu Qemu=0.4.0

Qemu Qemu=0.4.1

Qemu Qemu=0.4.2

Qemu Qemu=0.4.3

Qemu Qemu=0.5.0

Qemu Qemu=0.5.1

Qemu Qemu=0.5.2

Qemu Qemu=0.5.3

Qemu Qemu=0.5.4

Qemu Qemu=0.5.5

Qemu Qemu=0.6.0

Qemu Qemu=0.6.1

Qemu Qemu=0.7.0

Qemu Qemu=0.7.1

Qemu Qemu=0.7.2

Qemu Qemu=0.8.0

Qemu Qemu=0.8.1

Qemu Qemu=0.8.2

Qemu Qemu=0.9.0

Kvm Qumranet Kvm<=79

Kvm Qumranet Kvm=1

Kvm Qumranet Kvm=2

Kvm Qumranet Kvm=3

Kvm Qumranet Kvm=4

Kvm Qumranet Kvm=5

Kvm Qumranet Kvm=6

Kvm Qumranet Kvm=7

Kvm Qumranet Kvm=8

Kvm Qumranet Kvm=9

Kvm Qumranet Kvm=10

Kvm Qumranet Kvm=11

Kvm Qumranet Kvm=12

Kvm Qumranet Kvm=13

Kvm Qumranet Kvm=14

Kvm Qumranet Kvm=15

Kvm Qumranet Kvm=16

Kvm Qumranet Kvm=17

Kvm Qumranet Kvm=18

Kvm Qumranet Kvm=19

Kvm Qumranet Kvm=20

Kvm Qumranet Kvm=21

Kvm Qumranet Kvm=22

Kvm Qumranet Kvm=23

Kvm Qumranet Kvm=24

Kvm Qumranet Kvm=25

Kvm Qumranet Kvm=26

Kvm Qumranet Kvm=27

Kvm Qumranet Kvm=28

Kvm Qumranet Kvm=29

Kvm Qumranet Kvm=30

Kvm Qumranet Kvm=31

Kvm Qumranet Kvm=32

Kvm Qumranet Kvm=33

Kvm Qumranet Kvm=34

Kvm Qumranet Kvm=35

Kvm Qumranet Kvm=36

Kvm Qumranet Kvm=37

Kvm Qumranet Kvm=38

Kvm Qumranet Kvm=39

Kvm Qumranet Kvm=40

Kvm Qumranet Kvm=41

Kvm Qumranet Kvm=42

Kvm Qumranet Kvm=43

Kvm Qumranet Kvm=44

Kvm Qumranet Kvm=45

Kvm Qumranet Kvm=46

Kvm Qumranet Kvm=47

Kvm Qumranet Kvm=48

Kvm Qumranet Kvm=49

Kvm Qumranet Kvm=50

Kvm Qumranet Kvm=51

Kvm Qumranet Kvm=52

Kvm Qumranet Kvm=53

Kvm Qumranet Kvm=54

Kvm Qumranet Kvm=55

Kvm Qumranet Kvm=56

Kvm Qumranet Kvm=57

Kvm Qumranet Kvm=58

Kvm Qumranet Kvm=59

Kvm Qumranet Kvm=60

Kvm Qumranet Kvm=61

Kvm Qumranet Kvm=62

Kvm Qumranet Kvm=63

Kvm Qumranet Kvm=64

Kvm Qumranet Kvm=65

Kvm Qumranet Kvm=66

Kvm Qumranet Kvm=67

Kvm Qumranet Kvm=68

Kvm Qumranet Kvm=69

Kvm Qumranet Kvm=70

Kvm Qumranet Kvm=71

Kvm Qumranet Kvm=72

Kvm Qumranet Kvm=73

Kvm Qumranet Kvm=74

Kvm Qumranet Kvm=75

Kvm Qumranet Kvm=76

Kvm Qumranet Kvm=77

Kvm Qumranet Kvm=78

Event History

Dec 24, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2382?

CVE-2008-2382 is classified as a denial of service vulnerability due to the potential for an infinite loop caused by malformed messages.

How do I fix CVE-2008-2382?

To fix CVE-2008-2382, upgrade to a version of QEMU later than 0.9.1 or KVM later than version 79.

Which versions are affected by CVE-2008-2382?