CVE-2022-3165: Integer Underflow

Reference Links

• https://gitlab.com/qemu-project/qemu/-/commit/d307040b18
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I36LKZA7Z65J3LJU2P37LVTWDFTXBMPU/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTY7TVHX62OJWF6IOBCIGLR2N5K4QN3E/
• https://security.netapp.com/advisory/ntap-20221223-0006/
• https://launchpad.net/bugs/cve/CVE-2022-3165
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I36LKZA7Z65J3LJU2P37LVTWDFTXBMPU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTY7TVHX62OJWF6IOBCIGLR2N5K4QN3E/
• https://github.com/rfbproto/rfbproto/blob/master/rfbproto.rst#extended-clipboard-pseudo-encoding
• https://lists.nongnu.org/archive/html/qemu-devel/2022-09/msg03948.html
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2129759
• https://access.redhat.com/errata/RHSA-2023:2162
• https://access.redhat.com/errata/RHSA-2023:2757
• https://access.redhat.com/security/cve/cve-2022-3165
• https://bugzilla.redhat.com/show_bug.cgi?id=2129739
• https://gitlab.com/qemu-project/qemu/-/commit/0bf41cab93e5c72dcda717abd625698b59d9ba3e
• https://gitlab.com/qemu-project/qemu/-/commit/d307040b18bfcb1393b910f1bae753d5c12a4dc7
• https://security-tracker.debian.org/tracker/CVE-2022-3165
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3165
• https://bugzillia.redhat.com/show_bug.cgi?id=2129739
• https://ubuntu.com/security/notices/USN-5772-1
• https://nvd.nist.gov/vuln/detail/CVE-2022-3165
• https://ubuntu.com/security/CVE-2022-3165

Parent vulnerabilities

(Appears in the following advisories)

• USN-5772-1

Frequently Asked Questions

• What is the vulnerability ID for this issue?

  The vulnerability ID for this issue is CVE-2022-3165.

• What is the severity of CVE-2022-3165?

  The severity of CVE-2022-3165 is medium with a CVSS score of 6.5.

• What is the affected software for CVE-2022-3165?

  The affected software for CVE-2022-3165 includes QEMU versions up to 7.1.0, Ubuntu QEMU versions 1:6.2+dfsg-2ubuntu6.6 and 1:7.0+dfsg-7ubuntu2.1, Red Hat QEMU version 7.2.0, Fedora versions 36 and 37, and Debian QEMU versions 1:3.1+dfsg-8+deb10u8, 1:3.1+dfsg-8+deb10u11, 1:5.2+dfsg-11+deb11u3, 1:5.2+dfsg-11+deb11u2, 1:7.2+dfsg-7+deb12u2, and 1:8.1.2+ds-1.

• How can a malicious client exploit CVE-2022-3165?

  A malicious client can exploit CVE-2022-3165 by sending a specially crafted payload message to the QEMU VNC server while processing ClientCutText messages in the extended format.

• What is the remedy for CVE-2022-3165?

  The remedy for CVE-2022-3165 is to update QEMU to the recommended versions: Ubuntu QEMU 1:6.2+dfsg-2ubuntu6.6 or 1:7.0+dfsg-7ubuntu2.1, Red Hat QEMU 7.2.0, or Debian QEMU 1:3.1+dfsg-8+deb10u8, 1:3.1+dfsg-8+deb10u11, 1:5.2+dfsg-11+deb11u3, 1:5.2+dfsg-11+deb11u2, 1:7.2+dfsg-7+deb12u2, or 1:8.1.2+ds-1.