CVE-2008-5714: High severity Qemu Qemu vulnerability
Published Dec 24, 2008
·Updated
Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.
Affected Software
1 affected component
Qemu Qemu=0.9.1
Event History
Dec 24, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·06:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5714?
CVE-2008-5714 has been classified as a medium severity vulnerability due to its potential impact on VNC password security.
2
How do I fix CVE-2008-5714?
To fix CVE-2008-5714, upgrade to a later version of QEMU that does not have this vulnerability.
3
Who is affected by CVE-2008-5714?
Users of QEMU version 0.9.1 are specifically affected by CVE-2008-5714.
4
What kind of attacks can exploit CVE-2008-5714?
CVE-2008-5714 can be exploited by remote attackers to guess the VNC password due to an off-by-one error.
5
Can CVE-2008-5714 lead to unauthorized access?
Yes, CVE-2008-5714 can potentially lead to unauthorized access if an attacker successfully guesses the VNC password.