CVE-2015-8504: Divide by Zero
Last updated 24 July 2024
Other sources
Qemu emulator built with the VNC display driver support is vulnerable to an arithmetic exception flaw. It occurs on the VNC server side while processing the 'SetPixelFormat' messages from a client.
A privileged remote client could use this flaw to crash the guest resulting in DoS.
Upstream patch: --------------- -> http://git.qemu.org/?p=qemu.git;a=commitdiff;h=4c65fed8bdf96780735dbdb92a8
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2015/12/08/7
— Red Hat
Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2015-8504?
CVE-2015-8504 is a vulnerability in Qemu, when built with VNC display driver support, that allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.
How does CVE-2015-8504 affect Qemu?
CVE-2015-8504 affects Qemu when it is built with VNC display driver support.
What is the severity of CVE-2015-8504?
CVE-2015-8504 has a severity rating of medium.
How can the vulnerability CVE-2015-8504 be fixed?
The vulnerability CVE-2015-8504 can be fixed by applying the recommended patches for the affected software versions.
Where can I find more information about CVE-2015-8504?
More information about CVE-2015-8504 can be found at the following references: http://www.securityfocus.com/bid/78708, http://www.debian.org/security/2016/dsa-3469, http://www.debian.org/security/2016/dsa-3470